Privacy policy
Last updated 3 September 2026
The short version. QR codes are created by JavaScript running on your own device. The text, links, WiFi passwords and contact details you type are never sent to us, and we have no database in which to store them. We do not ask you to create an account.
1. Who we are
This website is gen-qr-code.com, referred to here as "we" or "us". It is run independently and has no company behind it. The only way to contact us, and the only address we publish, is contact@gen-qr-code.com. We read everything sent there.
For the purposes of the UK GDPR and EU GDPR, we are the data controller for the limited information described below.
2. What happens when you generate a code
Nothing you enter into a generator on this site reaches our servers. The encoding runs entirely in your browser. This is a technical fact, not only a policy commitment: you can disconnect from the internet after the page has loaded and the generators will continue to work.
In practice this means we never receive, and could not disclose to anyone, the following:
- Web addresses you turn into codes
- WiFi network names and passwords, including anything entered in the WiFi QR code generator
- Names, phone numbers, email addresses and other details typed into the contact card generator
- Message text, payment addresses, calendar entries and locations
Because nothing is stored, we cannot recover a code for you later. Download the file you need before leaving the page.
3. What we do collect
Server logs
The site is served by a third-party static hosting provider, which automatically records standard technical information each time a page is requested: IP address, browser type and version, the page requested, referring page, and a timestamp. We do not add to these logs, and we do not use them to build any profile of you. They exist so the host can keep the site available and investigate abuse or faults, and they are kept for a short period — typically no more than 30 days — before deletion.
Lawful basis: legitimate interests, specifically operating and securing the site.
Analytics
We run no analytics at all. There is no measurement script on any page of this site, no visitor counter, and no tag manager. We genuinely do not know how many people use the site or which pages they open, beyond whatever appears in the host's own server logs.
If you write to us, we keep your message and address so we can reply and to maintain a record of the correspondence. We do not add you to a mailing list.
4. Cookies
This site sets no cookies of its own. We do not use advertising cookies, tracking pixels, or cross-site identifiers. Your generator settings are held in memory for the duration of your visit and are discarded when you close the tab. Our cookie policy covers this in more detail.
5. Third parties
A small number of third parties are involved in delivering the site:
- Our static hosting provider — serves the pages and holds the server logs described above. This is the only third party involved in a normal page view.
- Google Fonts — the typeface is currently requested from Google's servers, which means your IP address is disclosed to Google when a page loads.
Note on Google Fonts. A German court found in 2022 that passing a visitor's IP address to Google in this way, without consent, breached the GDPR. If you have EU or UK visitors, serve the font files from your own domain instead. Doing so removes this third party entirely and lets you delete the bullet above.
We do not sell, rent or share personal information, and we run no advertising network.
6. Your rights
If you are in the UK, EU, or another region with comparable law, you have the right to request access to the personal data we hold about you, to have it corrected or erased, to object to or restrict processing, and to receive it in a portable form. Because we hold almost nothing beyond short-lived server logs and any email you have sent us, most requests can be answered quickly.
To exercise any of these rights, write to contact@gen-qr-code.com. You also have the right to complain to your data protection authority; in the UK this is the Information Commissioner's Office.
If you are in California
Under the CCPA and CPRA you may request disclosure of the categories of personal information collected and ask that it be deleted. We do not sell or share personal information as those terms are defined in the CCPA, and we do not process sensitive personal information.
7. Children
This site is a general-purpose tool and is not directed at children. We do not knowingly collect personal information from anyone under 13 (or 16 in the EU). If you believe a child has sent us information, contact us and we will delete it.
8. International transfers
Our hosting provider operates a global network and may process server log data on servers outside your country. Where data leaves the UK or EEA, providers of this kind rely on Standard Contractual Clauses or an adequacy decision. Since nothing you type into a generator ever reaches a server, the only data this can concern is the technical log entry for the page request itself.
9. Changes to this policy
If we change how the site works, we will update this page and the date at the top. Material changes will be noted prominently on the home page for a reasonable period.
10. Contact
Questions about this policy, or about privacy on this site generally, go to contact@gen-qr-code.com.