Trust, security & privacy
This page is maintained by the Qat team to answer common questions about how we handle your data and what security controls protect the app. It is editable project content — not an independent certification or third-party audit.
Accounts & access
Sign-in is provided through our backend authentication. Sensitive admin and scanner actions are limited to users we explicitly grant a role to. Profiles can only be edited by their owner.
Connections in transit
Traffic between your browser, Qat, and our backend is served over HTTPS. Payments are processed by Mollie — Qat never sees your card details.
Data we store
We store the data you give us to make the app work: account profile, events you interact with, Fast Pass purchases, and Fast Pass QR codes. Each table has row-level rules so users can only see their own data.
Subprocessors
Qat relies on third parties to operate: our hosting & backend provider, and Mollie for payments. They process the data needed to deliver their service.
Cookies & analytics
We use a small number of cookies required to keep you signed in and to measure aggregate, anonymous usage of the site. We do not sell your data.
Retention & deletion
We keep account and purchase data for as long as your account exists or as needed to fulfil your Fast Pass. To request deletion or export of your data, contact us below.
Shared responsibility
Some controls are provided by the platform that hosts Qat (network transport, database isolation, authentication primitives). Others are configured by the Qat team (row-level rules, role grants, what data we ask for). Account hygiene — strong unique passwords, keeping your email secure — stays with you.
Report a security issue
Found something that looks like a security or privacy issue? Please reach out so we can investigate. Include steps to reproduce and avoid sharing personal data of other users.
This page reflects current practices and is updated by the Qat team. It is not a certification and does not constitute legal advice. For binding terms, see our forthcoming Terms of Service and Privacy Policy.