Good information. I got the similar experence about SCAN.
At that time, I've given my private key to them. It should have not informed.

I moved my token with crypcurrency to the other wallet and it is safe now.
Anyway, please do not your personal infomration on the web or do not provide you with your private key or QR code.