BellOnQR

Privacy

Last updated 4 September 2026

If you are standing at a door

You have not signed up for anything and we are not trying to find out who you are. When you open a plate page we store: which plate it was, roughly what kind of phone you are on, and the time. If you press the button we store that a ring happened. If you write a message we store the message.

We do not store your address, your location, or your name. Your device is given one random marker so a household can silence a nuisance caller and so a courier can be recognised on a return visit. It is not linked to you, it expires after 90 days, and there is nothing that turns it back into a person.

Everything you leave is deleted automatically — after 14 days by default, and never more than 90. You can delete your own message immediately from the confirmation screen, without an account.

What we will never do

• Ask you for money, a card, a login or personal details. If a page that looks like ours asks for any of those, it is not ours.
• Ask for your location. The code already identifies the door, so it would tell us nothing we need.
• Put advertising or third-party scripts on the visitor page. Nothing on that page talks to any other company.
• Record anything on its own. Nothing exists unless you deliberately wrote it.

If you run a door

We store your email, your name if you give one, your phone number if you add one, which devices you have allowed to notify you, your doors and their settings, and the log of visits. You can delete the household at any time from the app, and everything goes with it.

Everything is stored on a server in the European Union. Notifications go through your phone maker's push service — Google or Apple — because there is no other way to reach a phone; the content is encrypted so that only your device can read it.

Contact

Write to hello@bellonqr.com and we will answer.