Privacy

Privacy Policy

How QAG uses data on its website and to manage its Facebook Page.

What QAG measures

After you choose Allow, QAG uses Google Analytics 4 to understand visit counts, referring domains, and usage of reviewed public pages. This helps us improve the site's content and usability.

What QAG does not send

Analytics is not loaded on account, card submission, tracking, status, or admin pages. QAG removes URL queries and fragments, uses fixed page titles, and replaces CERT numbers with a generic route before sending a page view. We do not send form values, names, email addresses, phone numbers, passwords, OTPs, or job identifiers to Analytics.

Cookies and changing your choice

If allowed, Google Analytics may set _ga and _ga_* cookies to distinguish visits. Declining does not limit the website. You can change your choice at any time with Analytics settings in the public-site footer. When consent is withdrawn, QAG stops loading Analytics and removes Analytics cookies accessible to the site.

Managing the QAG Facebook Page

QAG uses a self-hosted Postiz instance so authorized operators can connect and manage QAG's Facebook Page. When an operator authorizes access through Meta, the system may receive the Page name and ID, access tokens, posts and media created or scheduled by operators, publishing status, and engagement or insights data allowed by the granted permissions. QAG uses this data to prepare, schedule, publish, and review Page posts.

Storage and sharing of Page data

Connection data and draft posts are stored in QAG's access-restricted Postiz instance. When an operator publishes a post, its text and media are sent to Meta and appear on Facebook according to the Page's settings. QAG keeps local data as needed to manage the Page and related requests, or for any applicable legal obligation. Meta handles data on Facebook under its own policies.

Access and deletion requests

To request access to, correction of, or deletion of data QAG holds from a Page connection or website use, email support@qagcard.com with enough detail to identify the data. QAG will review the request and act under applicable law and retention obligations. A Page operator can also revoke the QAG Postiz app in Meta. Revoking access or deleting local Postiz data does not automatically remove posts already published on Facebook.

Privacy contact: support@qagcard.com

Read Google's Privacy Policy