Privacy Policy
Last updated: 2026
Overview
QR//GEN is a free QR code generator, URL shortener, and click/scan tracker. We aim to collect the minimum data needed to provide the service and be transparent about what that is.
Account Data
Sign-in is passwordless via email magic links. We store your email address and nothing else for authentication. No passwords, no OAuth tokens.
Encryption
We encrypt your stored content at rest with AES-256-GCM before it is written to the database. That includes QR payloads, short-link destinations, internal labels, and click/scan referrers and user agents. Lookup fields such as slugs and aggregate stats (country, device type, timestamps) stay in the clear so the product can function. We do not sell your data.
QR Code and Short Link Data
The content you encode into QR codes (URLs, Wi-Fi credentials, contact info, etc.) and the destinations behind your short links are encrypted, associated with your account, and only visible to you after decryption in your session.
Scan and Click Analytics
When someone scans a tracked QR code or opens a short link, we log: approximate location (country, region, city derived from IP), device type (mobile, tablet, desktop), referrer, timestamp, and — for A/B tests — which destination they were sent to. We do not store the visitor's IP address, name, or any personally identifiable information.
Cookies
We use a single HTTP-only session cookie to keep you signed in. Short links that run an A/B test also set a first-party cookie so the same visitor keeps seeing the same destination. No ad cookies, no third-party cookies.
Data Retention
Your QR codes and short links remain for as long as your account is active. Scan and click records older than 365 days are automatically deleted. You can delete individual codes or links, or request full account deletion at any time, which removes all associated data.
Third Parties
We do not sell or share your data with third parties. Scan location is approximated using a local IP-to-geolocation database — no external API calls are made with visitor IPs.
Contact
Questions about privacy? Reach out via the contact information on anisri.dev.