Privacy policy
Last updated
The short version: we do not collect what you put in your QR codes, and we do not sell anything about you.
What you type stays on your device
The generator runs in your browser. Links, WiFi passwords, contact details and logos are turned into a QR code on your own device. They are never sent to our server, and we have no copy of them.
No account needed, no cookies for tracking
You do not need an account to make a static code. We do not use advertising cookies, analytics cookies or tracking pixels. The generator itself sets no cookies. Our host may set a strictly necessary security cookie to block bots.
Server logs
Like almost every website, our hosting provider (Cloudflare) handles requests for our pages. To keep the site running and protected from abuse, it may process technical data such as your IP address, browser type and the page you asked for. We do not use this to identify you.
Static codes and scanning
When someone scans a static code, their phone reads it directly. We are not involved, so we cannot see or count scans of free codes.
Pro waitlist
If you join the Pro waitlist, we store your email address and the date you joined. We use it only to tell you once when Pro opens, and we delete it on request.
Accounts and Pro
If you sign in or buy Pro, we store:
- Your email address, and a sign-in cookie that keeps you logged in. It is strictly necessary and not used for tracking.
- Your dynamic codes: their names, destination links and the history of past destinations.
- Your subscription status from Stripe. We never see or store your card number.
Scans of dynamic codes
When someone scans a dynamic code, their phone visits our short link first. For each scan we store the time, the country and city (worked out by Cloudflare from the network, not from GPS), the device type, operating system, browser and the referring website's name. We do not store IP addresses or anything else that identifies the person scanning. Code owners see these counts in their dashboard.
Who processes data for us
- Cloudflare hosts the site, the database and the short links.
- Stripe handles payments and billing.
- Resend sends sign-in emails.
- Google handles "Sign in with Google" if you choose it, and Google Safe Browsing checks new destination links for malware and phishing. Only the link is sent, not who made it.
Deleting your data
You can delete your account at any time from the account page. That cancels any subscription, and deletes your email, codes and scan history from our database. Stripe keeps payment records for as long as the law requires.
Contact
Privacy questions: hello@qrnoexpire.com.