all systems operational
01 / TERMS
[ terms of service · v0.1 · 2026-04-24 · lawyer review pending ]

Terms of Service.
Plain words, binding clause.

These Terms are the legal agreement between you and Heldqr. They are written in plain language because legal-by-obfuscation is exactly the pattern this product was built against. The continuity clause in §06 is the load-bearing one: it is the binding version of the commitment shown on the homepage and at /continuity.

v0.1 ships pre-lawyer-review. The continuity clause itself is final language; the surrounding sections will be tightened by counsel before the indexing gate flips. If you spot something genuinely wrong, write to legal@heldqr.com.


02 / SERVICE

What Heldqr provides.

Heldqr is a service for creating and resolving QR codes. A static QR code encodes a URL directly. A dynamic QR code encodes a short URL on heldqr.io that we resolve to your destination URL — so you can change the destination without reprinting the code.

The hosted service runs on infrastructure operated by Heldqr. Resolver source code and the canonical redirect data are committed to a public continuity arrangement, described in §06 below and in full at /continuity.


03 / ACCOUNTS

Your account, your responsibility.

You are responsible for the destination URLs your codes resolve to and for keeping your account credentials safe. We do not police destination URLs proactively, but we will suspend codes that resolve to malware, phishing pages, or content that violates the laws of the jurisdiction you operate in. Suspension means the code resolves to a 410 Gone notice, not deletion — you can update the destination and have it un-suspended.

you must be at least 16, or have a parent or guardian agree on your behalf, to create an account.
you must not use Heldqr to host or distribute malware, phishing material, content that exploits children, or content unlawful where you operate.
you must not automate the creation of codes at a rate that defeats the per-account ceiling published at /fair-use.
we may suspend an individual code that violates the above. We notify the account owner by email when we do.
we may suspend an account that systematically violates the above. We refund any unused prepaid time on the account's plan.

04 / FEES + REFUNDS

Fees, what they cover, and refunds.

Pricing is published at /pricing. The free tier is genuinely free — no trial, no credit card, unlimited dynamic codes. The Pro tier is a recurring monthly subscription. The Business tier is a recurring monthly subscription with team features.

The fair-use caps that apply to every tier are published at /fair-use; the numbers there are part of these Terms by reference.

free tier no charge. Unlimited dynamic codes, subject to the code-creation rate ceiling in fair-use. Cancel anytime — there is nothing to cancel.
Pro tier €9 per month. Cancel anytime; the cancellation takes effect at the end of the current billing period. No partial-month refunds in the normal course.
Business tier €29 per month. Cancel anytime; the cancellation takes effect at the end of the current billing period. No partial-month refunds in the normal course.
usage above caps scans above the per-tier annual allowance trigger usage-based pricing on the commercial tiers — published at /fair-use before any cap is approached. Free-tier overage is a prompt to upgrade, not a charge.
price changes monthly subscribers get 30 days' notice of any price change.

05 / DATA

Your data, what we keep, what we don't.

The continuity plan is the reason we collect as little as we do. We have to be able to publish a redirect-only data dump in a wind-down event without lawyer review (see §06), so we don't collect things we'd be nervous to publish.

never stored scanner IP addresses. Geolocation happens in-process at scan time; only a coarse country code is stored.
never set cookies on the resolver path. Scan analytics are cookieless.
you can export everything tied to your account from the dashboard at any time, in CSV and JSON. The export includes your private code labels.
you can delete your account from the dashboard. Codes are removed from the resolver within 60 seconds; backups age out within 30 days.
law enforcement we comply with valid legal process from authorities in our jurisdiction. We publish an annual transparency report once we have anything to report.

06 / CONTINUITY

The continuity clause. This is binding.

If Heldqr stops operating as a going concern — for any reason: shutdown, insolvency, acquisition that changes the terms of these Terms, founder inability to continue — the following obligations apply, in order. They survive any change of ownership and they bind any successor entity.

The plain-language version of the same commitment lives at /continuity, with the operational runbook that backs it.

The public continuity arrangement is mirrored at github.com/heldqr/continuity-repo, where the data export schema, the resolver-source license, and the wind-down artifacts are committed in advance.

month 0 — notice Heldqr (or any successor) shall give twelve (12) months' written notice to every active customer by email and by a banner on every dashboard page. New signups shall be disabled on day one of the notice period.
months 1–5 — operate The hosted service shall continue to operate normally. Existing redirects shall continue to resolve. Annual renewals shall stop. Monthly subscribers shall be offered an opt-out of further charges.
month 6 — source The resolver source code shall be published to a public GitHub repository under MIT or Apache 2.0, sufficient that an independent operator can stand up the resolver against the data export described below.
months 7–8 — handover Heldqr shall negotiate in good faith with any credible third-party operator who proposes to take over hosting, including transferring the domain and the operational data set if a successor is identified.
month 9 — data An anonymized export of the canonical redirect data — shortcode, target URL, creation timestamp, and nothing else — shall be published to GitHub Releases, IPFS (≥ 2 pinning services), Archive.org, and a seeded BitTorrent file. Schema and checksum are published in advance at github.com/heldqr/continuity-repo.
months 10–11 — wind down The hosted service may migrate to a minimal static-serve mode if cost-to-operate becomes a concern. Customer support continues.
month 12 — handover or escrow The hosted service ends. The heldqr.io and heldqr.com domains shall be transferred to the pre-arranged successor or, failing that, released through the pre-arranged dead-man's-switch escrow such that the resolver may be kept running by a third party using the published source and data.

07 / LIMITS

What these Terms do not promise.

Honest commitments require honest limits. The continuity clause is the strongest promise in this document; everything outside its plain text is best-effort.

not promised indefinite hosted service. The continuity clause guarantees twelve months of notice, not perpetual hosting.
not promised specific uptime SLA. We aim for 99.99% on the redirect path and report monthly at /status, but a contractual SLA with credits is reserved for an Enterprise tier we have not shipped yet.
not promised takeover by any specific successor. We promise to publish source and data per §06; we cannot guarantee a third party stands up a successor service.
not promised data retention beyond the wind-down. After the §06 month-12 final shutdown, customer accounts are deleted; only the anonymized redirect dump persists publicly.
liability cap our liability for any claim arising from these Terms is capped at the fees you have paid Heldqr in the twelve months preceding the claim, except where law forbids such a cap.

08 / CHANGES + LAW

Changes, jurisdiction, contact.

These Terms are versioned at the top of the page. Material changes get 30 days' notice to active customers by email. The continuity clause in §06 cannot be weakened by a change to these Terms — only strengthened or restated.

Governing law and dispute resolution: to be confirmed at lawyer review before the public-indexing gate flips. The current operating entity is based in Belgium, and the most likely outcome is Belgian law and Brussels jurisdiction. This sentence is a placeholder, flagged here so it is not silently shipped.

contact legal@heldqr.com
changes log published in this page's git history at github.com/heldqr/continuity-repo.
notice period for changes 30 days by email to active customers, plus a banner on the dashboard.

09 / SIGNED
>

Legal-by-obfuscation is the pattern this product was built against.
The continuity clause is short, plain, and binding. That's the point.

— Heldqr · v0.1 · 2026-04-24