Privacy policy

Summary: the QR codes you create, the content you type and the logos you upload are processed only in your browser. They are never sent to us.

Who we are

mqrlink ("we") operates the website mqrlink.com. You can contact us at support@mqrlink.com.

Data you enter into the generator

Your QR content is processed in your browser. Links, text, email addresses, phone numbers, WiFi names and passwords, contact details, event details and uploaded logos are used only on your device to draw the QR code and create the file you download. We do not upload, store or log this information, and we have no database of QR codes.

Your logo is processed locally in your browser. It is read from your device, resized and drawn into the code without being sent anywhere.

Data stored in your browser

To remember your settings, we save a small amount of non-sensitive data in your browser's local storage: your light or dark theme choice, the last QR type you used, and your design preferences (colors, shapes, frame, size). We never store QR content, passwords or contact details there. You can remove these settings at any time with "Clear saved preferences" under the generator, or by clearing your browser's site data.

QR code scanner

If you use the scanner, your camera feed or chosen image is analysed on your device. Nothing is recorded or uploaded. Your browser asks for camera permission, and you can withdraw it at any time.

Server logs

Like any website, our hosting provider may automatically record technical request data such as IP address, browser type, requested page and time, for security and to keep the site running. These logs never include what you type into the generator, because that data does not leave your browser.

Analytics

We use Google Analytics 4 to understand which pages and features are used. It sets cookies, so it is not loaded at all until you choose "Allow analytics" in the cookie notice. Every visitor is asked, wherever they are. Saying no changes nothing else: the generator and the scanner work the same either way.

If you allow it, Google Analytics receives:

• a random visitor ID kept in a cookie, which tells one browser's visits apart from another's but does not name you;
• your device type, operating system, browser, screen size and language;
• your approximate location (country and city), which Google works out from your IP address. Google Analytics 4 does not store the IP address itself;
• the pages you open, the page you arrived from, and interaction events such as "a QR code was generated" or "a PNG was downloaded", together with the QR type, file format or size.

It never receives your QR content, email addresses, phone numbers, WiFi passwords, vCard details or files. We use this data only for usage statistics. Google signals and advertising personalisation are switched off, and we tell Google through its consent mode that advertising storage, advertising user data and ad personalisation are denied.

Withdrawing consent

You can change your mind at any time. Choose "Cookie settings" in the footer of any page, then "No thanks". Analytics stops straight away, the Google Analytics cookies are deleted from your browser, and it is not loaded on later visits. Data collected before you withdrew is deleted by Google Analytics automatically after at most 14 months. See Google's privacy policy.

Advertising

We may show ads through Google AdSense. If enabled, third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website or other websites. Google's use of advertising cookies lets it and its partners serve ads based on your visits to this site and other sites on the internet. Where the law requires it, you will be asked for consent before personalised ads are shown.

You can opt out of personalised advertising in Google Ad Settings, and read how Google uses information from sites that use its services. Ads are never shown inside the generator.

What we do not collect

• No accounts, so no names, email addresses or passwords are registered with us.
• No copies of the QR codes you create, the content inside them or the logos you add.
• No scan tracking. Static codes do not pass through our servers when they are scanned, so we cannot see who scans them, where or when.
• No images or video from the scanner.

Cookies and local storage

This website itself sets no cookies. It stores three small values in your browser's local storage, which stay on your device and are never sent to us:

• mqr-theme: your light or dark theme choice.
• mqr-prefs: your last QR type and design settings, so the generator opens the way you left it.
• mqr-consent: whether you allowed or declined analytics, so the cookie notice does not ask again.

Google Analytics sets its own cookies (_ga and one starting with _ga_) only after you allow it. They last up to two years and are removed as soon as you withdraw consent. You can delete everything at any time by clearing this site's data in your browser.

Third parties

• Hosting provider: serves the website files and keeps the server logs described above.
• Google Analytics: usage statistics, only with your consent.
• Google AdSense: advertising, only if and when it is enabled, and only with your consent where consent is required.

Google may process analytics and advertising data on servers outside your country. Google's own policies, linked above, describe the safeguards it applies to those transfers.

Security

The site is served over HTTPS. Because your QR content never leaves your device, the most sensitive information you handle here is never in transit and never on our systems. Downloaded files are saved by your browser to your own device.

Children

This website is not directed at children, and we do not knowingly collect personal data from them. If you are under 18, or under the age of digital consent where you live, please choose "No thanks" in the cookie notice unless a parent or guardian has agreed.

Your rights

Because we do not collect generator content or create accounts, we usually hold nothing that identifies you by name. Where we do process personal data about you (analytics data if you allowed it, server logs, or an email you sent us), you can ask us to:

• tell you what personal data we process, what we do with it and who it is shared with;
• correct, complete or update it;
• erase it, unless the law requires us to keep it;
• stop any processing that relies on your consent. For analytics you can do this yourself, as described under Withdrawing consent.

To use any of these rights, email support@mqrlink.com. It is free, and we reply within 30 days. These rights come from laws such as the GDPR, the UK GDPR, India's Digital Personal Data Protection Act and the CCPA. Which of them apply to you depends on where you live.

Visitors in India

This section is our notice under India's Digital Personal Data Protection Act, 2023 (the DPDP Act). It applies when you use mqrlink from India.

• Who decides how your data is used: mqrlink, the operator of mqrlink.com, is the data fiduciary.
• Personal data and purpose: the items listed under Analytics, processed only to produce usage statistics and only with your consent. If you email us, we use your address and message only to reply. Our hosting provider records the request data described under Server logs to keep the site secure and running.
• Consent: analytics stays off until you choose "Allow analytics". Declining does not limit the service in any way.
• Withdrawing consent: "Cookie settings" in the footer, as described under Withdrawing consent.
• Your rights: a summary of the personal data we process and what we do with it, the identity of everyone it is shared with, correction, completion, updating and erasure, grievance redressal, and the right to nominate another person to use these rights for you if you die or become unable to.
• Who processes data for us: Google (analytics) and our hosting provider. They may process it on servers outside India.
• Children: under the DPDP Act a child is anyone under 18. A parent or guardian has to make the analytics choice for a child.
• Grievances: email support@mqrlink.com with "DPDP request" in the subject line. We reply within 30 days.
• Complaints: if our reply does not settle the matter, you may complain to the Data Protection Board of India. The Act asks you to raise the grievance with us first.

Complaints

If you believe we have handled data about you incorrectly, contact us first so we can put it right. You also have the right to complain to the data protection authority in your country. In India that is the Data Protection Board of India.

Changes

We will update this page if our practices change, and change the date at the top.