THE1QR stores the public owner name, message, destination, takeover level, ownership history and aggregate QR scan count required to operate the service.
During THE FIRST 100 launch, THE1QR stores a one-way SHA-256 hash derived from network and browser request metadata to limit duplicate free claims; the raw network address is not stored in the free-claim table.
For Telegram Stars payments, THE1QR stores the Telegram user identifier, invoice claim identifier, payment charge identifier, amount and fulfillment/refund status needed to deliver the service, prevent duplicate fulfillment and process refunds.
Telegram handles payment credentials. THE1QR does not store card numbers. Automated safety checks may process the submitted URL, redirect chain and a limited text sample of the destination page through security and content-classification services. Safety audit records are retained to prevent abuse and investigate blocked destinations.
For the Partner Program, THE1QR stores the partner code, a private dashboard token, Telegram account identifier after verification, attribution events and commission metrics required to operate the program. Partner dashboard tokens should be kept private.