Privacy Policy
This policy explains what information que ("we", "us"), operated by MotheBuilder, collects when you use our QR-based virtual queue service (the "Service"), and what we do with it.
1.Who this policy is for
Two kinds of people use que:
- Businesses that create an account to run a queue.
- Customers who scan a business's QR code to join that queue from their phone.
For a customer's information, the business running the queue is the data controller and we act as their processor; see section 8.
2.Information we collect
When a business signs up: business name, email address, and a password (stored only as a salted hash — we never keep the plain text). Plus the queue setup you create: services, durations, prices, and any chairs/counters.
When a customer joins a queue themselves: the service they pick, their name, and their phone number — both required, to hold and identify their place in the line. The queue also records their permanent ticket number, position, status, and timestamps. Staff-created walk-in tickets may include a name or phone only if staff enter one.
If a customer turns on "your turn" notifications: a browser push subscription (an endpoint URL and keys provided by their browser) linked to their ticket.
Automatically: your IP address and basic request information, used to keep the Service secure and to rate-limit abuse. We also log anonymous page and button events (for example, that the landing page was viewed) that contain no personal information.
3.How we use information
- To run the queue: issue ticket numbers and compute position, status, and estimated wait.
- To authenticate businesses and staff and keep accounts secure.
- To send "it's your turn" notifications, if the customer opted in.
- To prevent abuse, debug problems, and keep the Service available.
We do not sell personal information or use it for third-party advertising.
4.Cookies and local storage
We use a single essential, first-party login cookie (HTTP-only) to keep a business signed in. It is required for the dashboard to work and is not used for tracking.
On a customer's device, we store their ticket link in the browser's local storage so they can return to their live ticket. We do not use third-party advertising or tracking cookies.
5.Public displays are PII-free
The waiting-room TV board and any public "now serving" view show ticket numbers only — never names or phone numbers.
6.Who we share information with
We share data only with the service providers needed to run que:
- Amazon Web Services (AWS) — hosts the application (an EC2 server in the EU (Ireland) region).
- Supabase — hosts our PostgreSQL database.
- Google Fonts — serves the fonts on our pages; this involves your browser requesting files from Google, which receives your IP address.
- Browser push services (such as those run by Google, Mozilla, or Apple) — deliver notifications you opt in to.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the Service.
7.How long we keep it
Account and queue data is kept while a business account is active. Customer ticket data is kept as part of the business's queue history. A business may request deletion of its account and associated data by contacting us. Anonymous logs are retained for a limited period for security and troubleshooting.
8.If you are a business using que
You are responsible for handling your customers' information lawfully — including telling them how their name or phone number will be used, and having a lawful basis to collect it. que processes that information on your behalf to provide the queue.
9.Security
We protect data with measures including password hashing (bcrypt), encrypted connections (HTTPS/HSTS), signed login tokens, and rate limiting. No system is perfectly secure, but we work to keep your information safe.
10.Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing. To make a request, contact us at mo.thebuilder@outlook.com. If your information sits inside a specific business's queue, we may direct your request to that business.
11.Children
que is intended for use by businesses and their customers, and is not directed at children under the age at which consent is required in your jurisdiction.
12.Where data is processed
Our providers may process and store data on servers located outside your country. By using the Service you understand your information may be transferred to and processed in those locations.
13.Changes to this policy
We may update this policy from time to time. When we do, we will change the "last updated" date above. Significant changes will be highlighted where practical.
14.Contact
Questions about this policy or your data? Contact MotheBuilder at mo.thebuilder@outlook.com.