Privacy, in plain language

Your QR content

The static generator processes links, text, Wi-Fi credentials and other QR fields in your browser. We do not upload those fields or finished QR images to our servers or Google Analytics. Files you explicitly choose to upload are handled separately as described below. The form lives in page memory; we do not save a QR history. Downloads go to your device. Sharing hands the image to the app you choose.

Anyone with your finished QR can decode its contents. A Wi-Fi QR includes readable connection details. Your browser, extensions, chosen sharing app and the destination website have their own data practices.

Uploaded files and shared links

When you sign in and upload a PDF, image, audio file or video, QRToolset stores the file in Cloudflare R2 and stores its name, size, type, upload date and account owner in our database. Free limits are 20 MB per file and 20 MB per account; paid plans allow larger files and storage as shown on our pricing page. Files stay available until you delete them from My files or they are removed for abuse or operational reasons. Upload only content you have permission to share.

Uploaded files are accessible to anyone with their shared link. They are not private storage. Deleting a file stops future access through its shared link but cannot remove copies someone already downloaded. Deletion also breaks printed QR codes pointing to that file.

Payments and editable QR codes

Polar handles paid-plan checkout and subscription billing. When you choose a paid plan, we send Polar your account ID and email to associate the purchase with your account. Payment details are entered at Polar. We store the customer ID, plan, billing interval and paid-access expiry in D1 and use verified billing events to update access.

Editable QR codes store a name, destination URL, total visit count and daily visit totals in UTC with your account. Counts include repeated requests and bots. We do not store visitor IP addresses, device profiles or location in these counts. Deleting an editable QR removes it and its visit history. Canceling a plan stops editing and counting after the paid period; existing links retain the last destination and return to the free redirect page.

Optional link redirects include the destination URL in the shared QRToolset address. The redirect page displays that destination, a three-second countdown and a separate advertising placement. Visitors can continue immediately or pause. Do not use this feature for confidential or access-token URLs. The redirect and file pages are marked noindex and do not load our Google Analytics tag.

Website analytics

QRToolset loads Google Analytics automatically on its production website to understand page visits and improve the service. There is no in-site analytics switch. Analytics uses the public canonical page address; our page-view events omit query strings, fragments and referring URLs. We do not add QR inputs, clipboard contents or exported images to these events.

When your browser contacts Google, Google receives network and browser information, such as your IP address and device information, under its own processing policies. Google Analytics may store cookies to distinguish visits. We disable Google signals and advertising personalization in our tag configuration, and keep advertising storage and ad user data denied.

Read how Google uses information from partner sites and Google’s privacy policy for details. Browser settings, tracking protection and blocking extensions may limit measurement. Clearing cookies does not delete information already received by Google.

Browser storage

We store your light or dark theme preference locally. Google Analytics manages its own analytics cookies. Older analytics preference settings are no longer used. QR input fields are not stored with these preferences. You can clear this website’s cookies and local storage through your browser settings.

Hosting and accounts

Cloudflare hosts and protects QRToolset. It receives network requests, including IP addresses and requested URLs, to deliver the website and help prevent abuse. This is separate from client-side QR generation. Avoid putting private information in the website’s address bar or in support requests.

No account is required to generate a QR from a link or text. File uploads require an account. The account sign-in pages process the email, password and session information needed for authentication. Account sessions also control file uploads and deletion.

Policy updates

We do not load a third-party advertising network. We will update this notice if the tools or services change how information is collected or used.

Contact

QRToolset is maintained by Kartik Labhshetwar. For privacy questions or requests about information you have provided, use the contact options on the maintainer’s public profile. Include only the details needed to understand your request; never include a password or private QR payload.