Terms of Service

Qrap moves whatever content one paired device sends to the other, and holds files temporarily to make that transfer possible. There are no accounts — a session exists only for the length of one pairing and is deleted (contents included) when it ends, expires from inactivity, or either device closes it.

The Service is an automated relay. Content passing through it is not reviewed, screened, or moderated before delivery, and the operator does not inspect, endorse, or control what any user sends or receives.

You are solely responsible for the content you transmit through the Service and for complying with the laws that apply to you and to the content itself — including laws on copyright, privacy, and the possession or distribution of illegal material. You must not use the Service to send content that is illegal, infringing, or that you don't have the right to share.

To the fullest extent permitted by law, the operator disclaims liability for content transmitted by users of the Service and is not responsible for how any user obtains, uses, or redistributes content sent or received through it.

Content is encrypted in your browser before it leaves the device, and the key travels only in the QR code — never to the server. The relay therefore cannot read what you send, and nothing it keeps includes message bodies, filenames, the encrypted payload, or access tokens.

A metadata record of that a transfer happened is kept, as required by applicable law. For each event — creating a session, pairing, relaying a message, uploading or downloading a file, ending a session — that record holds the time, the session id, the event type, your IP address, a coarse location (country and city, not a precise position), a coarse device description such as “iOS/Safari” rather than your full browser string, the pseudonymous per-browser id the app generates, and the size in bytes. It does not record the address you visited or anything in the transfer.

These records are deleted automatically 90 days after they are written. Separately, when a device accepts these terms, that acceptance is recorded — the time, the session, the pseudonymous device id, and which version of this page was accepted. That row contains no IP address or location, and is kept for one year.

No accounts exist, so none of this is tied to a name, an email address, or a profile. Nothing recorded is sold, shared for advertising, or used to build a profile of you; it exists to meet retention obligations and to answer a lawful request.

The operator reserves the right to terminate a session, block access, and cooperate with law enforcement or respond to valid legal process where required by applicable law or where the operator becomes aware of content that is illegal or violates these terms — notwithstanding the automated, unreviewed nature of the relay described above.

Reports of misuse, legal notices, and questions about the records described above go to qrap.support@gmail.com. The relay is automated and its contents are encrypted end to end, so the operator cannot see what passes through it and will not learn of a problem unless somebody says so. A report is the only thing that can start any of the action described above.

A report is most useful with the session id and the approximate time, which together identify the event in the record. What was actually sent cannot be produced: it is encrypted with a key that never reaches the server, and it is deleted when the session ends.

The same address takes questions about your own data — what the record holds for a session of yours, and requests to exercise rights available to you under applicable data protection law.

The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including as to availability, reliability, or fitness for a particular purpose. Sessions and files are ephemeral by design — do not rely on the Service for anything you need to keep.

To the fullest extent permitted by law, the operator is not liable for any indirect, incidental, or consequential damages arising from your use of the Service, or from content transmitted by any user, including where that content is illegal or infringing.

These terms may be updated from time to time; the date above reflects the latest revision. Continued use of the Service after a change constitutes acceptance of the revised terms.