Privacy & compliance

2a.qa is built privacy-first and aligned with Qatar's Personal Data Privacy Protection Law (PDPL). This page explains exactly what we collect, the rights you have, and the safeguards behind the platform.

What we collect

  • Your account: email and name.
  • Content you create: short links, your bio page, and any files you upload.
  • Minimal analytics: page and link visits, with the visitor IP truncated for abuse prevention only.
  • No third-party advertising or tracking pixels.

Right of access (data export)

  • Download a complete copy of your data as JSON at any time from Settings → Export my data.
  • The export excludes secrets (password hashes, API-key hashes, signing secrets).

Right to erasure

  • Deleting your account permanently removes your records from the database AND your uploaded files from disk — not just the account row.
  • You can edit or correct your profile and content at any time.

IP minimisation

  • Visitor IP addresses are masked for page owners — only a coarse network prefix is shown, never the full address.
  • Full IPs are visible only to platform administrators for abuse investigation, and are removed entirely after the retention window.

Retention

  • Visit analytics: 90 days. Error logs: 30 days.
  • Pruning runs automatically every day; personal data is not kept beyond its purpose.

Encryption

  • All traffic is encrypted in transit (TLS).
  • File uploads support optional end-to-end (zero-knowledge) encryption — the server never sees the key.

Tamper-evident audit log

  • Every administrative action is recorded in a cryptographic hash chain.
  • Any later edit or deletion of a historical record breaks the chain and is detectable — integrity can be verified on demand.

No third-party leakage

  • Maps on business cards are rendered on our own servers — visitors are never silently exposed to external map providers.
  • Encrypted off-site backups are taken hourly so your data survives hardware loss.
For any privacy request, reach us through your account settings or the “Report” link shown on every public page.
2a.qaLast updated: 2026-06