How does the QR code identify a member?

The QR code contains an opaque, revocable token. It does not contain a member’s email, phone number, password, or other personal information.

When staff scan it, Kardy checks the token on the server and returns the membership context that the staff member is allowed to use. That keeps the scan quick without making the QR itself a container for private data.