Acceptable Use Policy

This Acceptable Use Policy ("AUP") is part of the Terms of Service of Mihail Hummel ("Trackero"). It applies to everyone who uses the Service, including the content of QR codes and short links, the destinations they lead to, the custom domains you connect, and anything you upload. You are responsible for any use of your Account, including by Your Clients and team members.

1. Prohibited content and destinations

You must not create, or point a QR code or link to, any content or website that:

1. Phishing and credential theft: imitates a bank, government, carrier, parking or payment service, marketplace, or any other organisation in order to obtain passwords, card or bank details, identity documents or other personal data ("quishing");
2. Malware: distributes viruses, ransomware, spyware, unwanted software, cryptominers, or exploits;
3. Fraud and scams: including fake shops, investment or crypto scams, advance-fee fraud, fake invoices or fines, fake charity collections, and pyramid schemes;
4. Child sexual abuse material or any content that sexualises minors. We report such content to the competent authorities;
5. Illegal content under EU law, the law of an EU Member State, or the law of the country where the content is accessed, including terrorist content, incitement to violence, illegal hate speech, and the sale of illegal goods or services (such as drugs, weapons, counterfeit goods or unlicensed gambling);
6. Infringement: content that infringes copyright, trademarks, privacy, image rights or other rights of third parties, including unauthorised use of brand logos in or around QR codes;
7. Sexually explicit content or services, unless lawful in all countries where the code is used and protected by effective age verification;
8. Harassment and doxxing: content that threatens, harasses, defames, or exposes the personal data of individuals;
9. Deceptive redirects: destinations that are different from what a reasonable person scanning the code would expect, including "cloaking" (showing reviewers different content than users), bait-and-switch redirects, and changing a printed code's destination to something unrelated or harmful;
10. Spam: unsolicited bulk messages containing our links, or links used to evade spam filters;
11. Covert surveillance: using codes or links to track specific individuals without their knowledge, for example on personal letters, documents or objects intended for a particular person.

2. Custom domains

If you connect your own domain, you must not:

• connect a domain that you do not own or that its owner has not authorised you to use, or keep it connected after that authorisation has ended;
• connect a domain whose name imitates or could be confused with another brand, organisation, public authority or person (for example look-alike spellings, or names that suggest a bank, payment service, carrier or government body), or that infringes trademarks or other rights;
• use a custom domain to hide where a link really leads, to get around blocklists or spam filters, or to make a link look like it comes from someone else;
• redirect visitors from the root of a custom domain to anything this AUP prohibits for links and QR codes.

Everything else in this AUP applies to links and QR codes on custom domains in the same way. If a domain breaks these rules, we may pause or disconnect it as well as the links on it.

3. Respect for people who scan

• You must comply with data protection, consumer protection and advertising laws that apply to your campaigns, including informing scanners that statistics are collected (for example in the privacy notice of your destination website) and identifying your campaigns as advertising where required.
• You must not use the Service to collect special categories of personal data (such as health, religion, sexual orientation or political opinions) or to infer them from scans, for example by placing tracked codes on medical documents, at places of worship or at political events, unless you have a valid legal basis and have informed the people concerned.
• You must not try to re-identify individuals from Scan Data or combine it with other data to do so.
• You must not place codes on property or materials of others without permission.

4. Abuse of the Service

You must not:

• attempt to gain unauthorised access to the Service, other accounts or our systems, or probe, scan or test their vulnerability (unless you report security issues to us responsibly at support@trackero.co);
• interfere with or disrupt the Service, for example through denial-of-service attacks, excessive automated requests, or load testing;
• use bots, scrapers or automated scripts to create content or extract data, except through features we provide;
• circumvent plan limits, usage allowances, payment, or technical restrictions, including by creating multiple free accounts;
• resell, sublicense or white-label the Service as a standalone product without our written permission (sharing dashboards with Your Clients as part of your own services is allowed);
• artificially inflate scan or click statistics, or misrepresent analytics from the Service to Your Clients or others;
• impersonate Trackero, our staff or any other person, or misrepresent your affiliation.

5. Enforcement

We may investigate suspected violations and, depending on the severity, warn you, disable individual codes or links (for example by redirecting them to a warning page), pause or disconnect custom domains, deactivate dashboards, restrict features, suspend or terminate your Account, and report illegal activity to the competent authorities. In urgent cases (in particular phishing, malware, fraud and child sexual abuse material) we act immediately and without prior notice. You will receive a statement of reasons and can appeal, as described in Section 10 of the Terms. Repeat infringers will have their Accounts terminated.

6. Reporting a violation

If you come across a Trackero QR code or link (on shoort.link or on a customer's own domain) that you believe is illegal or violates this policy, please use our report form or email abuse@trackero.co. You do not need an account. We confirm receipt, review every notice, and tell you what we decided. Details are in the Legal Notice.

7. Changes

We may update this AUP to respond to new types of abuse or legal requirements. Material changes are announced as described in the Terms.