Privacy Policy — Sanket QR

1. Overview & Architecture

This Privacy Policy governs the manner in which Sanket QR ("we", "our", or "the application"), developed by Sannivesham, handles user data across its website, web application, and mobile/PWA distributions.

Sanket QR is committed to user privacy by design. The architecture is built entirely on native Web APIs and client-side algorithms that execute locally on your personal device (smartphone, tablet, or computer). Because the application does not utilize a backend database, telemetry servers, or user account systems, your confidential inputs—such as URLs, personal notes, Wi-Fi credentials, and contact cards—never leave your device.

2. Device Permissions Usage (Google Play Compliance)

In compliance with the Google Play Developer Program Policy regarding Device and Network Abuse, Permissions, and User Data, below is a complete and transparent breakdown of every device permission requested by Sanket QR:

Camera Access

android.permission.CAMERA

Reason: Used solely to provide real-time optical scanning of physical QR codes via your device's camera viewfinder.

Handling: Video frames are analyzed purely in transient device RAM. No images or videos are recorded, saved to permanent storage, uploaded to remote servers, or transmitted to any third party. Camera access stops immediately once scanning completes or is paused.

Photos / File Storage

READ_MEDIA_IMAGES / File API

Reason: Required only when you explicitly choose to upload a pre-existing QR image from your gallery, or when you download a generated vector SVG / PNG code to your device.

Handling: The app only accesses the specific image file you select via the system file picker. We cannot and do not access your broader photo library, contacts, or internal files.

Clipboard Access

Clipboard API

Reason: Enables user-initiated actions such as pasting a URL from the clipboard ("Paste" button), pasting an image screenshot (Ctrl+V), or copying decoded scan results.

Handling: The app never reads clipboard contents automatically in the background. Clipboard access is strictly triggered by direct user interaction.

Torch / Flashlight

android.permission.FLASHLIGHT

Reason: Allows you to toggle the camera flash on your device to illuminate dark environments while scanning QR codes.

Handling: Controlled exclusively by the user via the "Flashlight" toggle button.

3. Information We Do NOT Collect

In direct alignment with Google Play's Data Safety requirements, we explicitly disclose that Sanket QR does not collect or share any user data:

No Personal Identifiers: We do not collect names, email addresses, phone numbers, postal addresses, or usernames.
No Precise or Approximate Location: We do not access GPS, Wi-Fi triangulation, or cell tower location data.
No Device or Hardware Identifiers: We do not collect IMEI, MAC addresses, Android IDs, or Advertising IDs (GAID).
No Financial or Payment Data: Sanket QR is 100% free with no in-app purchases, payment card details, or financial accounts.
No Biometric or Health Information: No facial recognition, fingerprint data, or health-related information is accessed.
No Browsing or Search History: We do not monitor websites you visit or search queries you perform.

4. Local Storage & User Data Deletion

For your convenience, Sanket QR provides a "Recent Codes" and "Recent Scans" feature. This feature operates through your browser's local sandbox storage (localStorage):

History records are stored strictly on your local device hardware.
History records are never synced to any cloud database or remote backup.
Instant Deletion: You can permanently wipe your stored history at any time by clicking the "Clear History" or "Clear Scans" buttons in the application.
Clearing your browser cache or uninstalling the PWA/application permanently purges all stored data immediately.

5. Third-Party Services, SDKs & Advertising

To preserve our privacy-first guarantee:

No Advertising Networks: Sanket QR contains no advertising SDKs (such as Google AdMob, Unity Ads, or Meta Audience Network).
No Analytics or Crash Trackers: We do not include tracking SDKs (such as Firebase Analytics, Google Analytics, Flurry, or AppsFlyer).
No Social Media Trackers: No third-party social tracker pixels (Facebook Pixel, TikTok Pixel) are embedded in this application.
Bundled Open-Source Libraries: The cryptographic QR engines (qrcode.js and html5-qrcode) run locally within the application bundle without making background telemetry calls.

6. Children's Privacy (COPPA & Families Policy Compliance)

Sanket QR is suitable for audiences of all ages, including families and children. We strictly comply with:

The United States Children's Online Privacy Protection Act (COPPA).
The European Union General Data Protection Regulation (GDPR / GDPR-K).
The Google Play Families Policy.

Because Sanket QR does not collect, transmit, or share personal information from any user, we do not knowingly solicit or collect data from children under the age of 13 (or under 16 in the European Economic Area).

7. User Rights (GDPR, CCPA/CPRA & CalOPPA)

Depending on your jurisdiction, you are entitled to specific privacy rights:

Right to Know / Access: You have the right to know what data is collected. As disclosed, zero personal data is collected or retained on remote servers.
Right to Erasure: You retain full autonomy to erase local device storage at any moment using in-app controls.
Do Not Sell My Personal Information: We do not sell, rent, monetize, or trade user data to data brokers or marketers under the California Consumer Privacy Act (CCPA).
Right to Non-Discrimination: Sanket QR provides full access to all features equally without requiring personal data disclosure.

8. Security Safeguards

We employ modern digital security practices to protect your interactions:

HTTPS Encryption: All assets and content are served over modern Transport Layer Security (TLS/HTTPS).
Cross-Site Scripting (XSS) Prevention: All scanned content is strictly sanitized and rendered via safe DOM APIs (textContent) rather than unvalidated HTML insertion.
Safe Redirection: External links scanned via camera or image require explicit user verification and protocol verification (blocking malicious javascript: or data: execution).

9. Changes to this Privacy Policy

We may update our Privacy Policy periodically to reflect technological changes, legal compliance updates, or new application features. Any modifications will be posted directly on this page with an updated "Effective Date". We encourage users to review this page periodically. Continued use of Sanket QR constitutes acceptance of any revisions.

10. Contact Developer

If you have any questions, concerns, or inquiries regarding this Privacy Policy or the security of Sanket QR, please contact the developer:

Developer: Sannivesham
Application: Sanket QR
Email: web.sannivesham@gmail.com