Skip to main content

​
Two different QR codes

A membership QR must not contain an email, phone number, password, or other personal details. It is not a payment code. Branding can differ while the underlying identity remains the same.

​
Access and event history

Organization data is tenant-scoped. A valid QR does not give a caller permission to award stamps: the operation also requires authorized organization access. Stamp and redemption events are append-only audit history, not editable receipts. If confirmation is delayed, check the result before retrying. Record the outlet, time, and error for Support, without including a private QR. Passwords are handled by the authentication provider. Signing keys, payment secrets, and service credentials belong on the server, never in public pages or browser code.