QR Code Generator privacy

Last updated: 7 October 2026

In short: static QR codes are created entirely in your browser and send nothing to any server. Only if you turn on the “Dynamic QR” option is the destination link stored on our server, together with a few anonymous scan statistics. There are no accounts, no profiling cookies, no ads and no third-party analytics.

Static QR codes

Content, colors, logo and images stay on your device: generation, the read test, the scanner (including the camera) and exporting to PNG, SVG, JPG, WebP, PDF and ZIP all happen in the browser. The logo you add is not uploaded anywhere.

Your browser stores locally (localStorage) your history, favorites, theme, language and the list of your dynamic QR codes. This is your data and we cannot see it: you can clear it from the browser settings or the app buttons. A copy of the app for offline use is kept by the browser (service worker cache).

Dynamic QR codes

When you press “Create dynamic QR” we store on the server:

• the destination address you chose and the short code of the link;
• a hash (SHA-256) of your secret management link: only you see the link itself, we cannot recover it;
• creation and last-change dates, status (active/disabled) and the number of scans;
• a hashed form of the IP address of whoever created the QR, used only to limit abuse.

Each time someone scans the QR we record: the date, the device type (iOS, Android, computer, other), the browser language (two letters) and a daily anonymous code that lets us count unique visitors within the same day. It cannot be linked to a person or compared from one day to the next; the plain IP and browser are not stored. Visits from bots and link previews are not counted. Scan statistics are kept for 400 days and then deleted.

Whoever scans a dynamic QR is redirected to the destination: from that moment the destination site's own policy applies. Dynamic QR codes are not meant for personal or confidential data, and destinations pointing to private or invalid addresses are rejected.

The legal basis is performing the service you asked for; for the IP hash and aggregate statistics, our legitimate interest in security and in running the service.

Cookies and third parties

The generator uses no cookies and loads no fonts, scripts, maps or analytics from other domains. As on any website, the hosting server (Hostinger) logs requests (IP, date, page) for security and diagnostics under its own policies; we do not use them to identify you.

Deletion and your rights

You can disable a dynamic QR at any time from its management page. To have a dynamic QR and its statistics permanently deleted, write to us with its short code. Regulation (EU) 2016/679 gives you the rights of access, rectification, erasure, restriction, objection and portability, plus the right to lodge a complaint with your data protection authority.

Data controller: GIF Web Solutions (the name under which an individual publishes their applications). Contact: gifwebsolutions (chiocciola) gmail.com.

The generator is not aimed at children under 14.