Privacy Policy
This policy explains what personal data GenerateQR.link collects, why, and what rights you have. We keep it short and plain on purpose.
1. Who is responsible
GenerateQR.link is operated by Hernán Matías Genoud, trading as Maoli Digital, Mar Cantábrico 21, 38612 El Médano, Tenerife, Spain. You can reach us at [email protected]. See also our Legal Notice.
2. What we collect
Static QR codes. When you create a static QR code (URL, text, WiFi, WhatsApp, email, phone, vCard or SMS) without an account, it is generated in your browser. What you type, including WiFi passwords or contact details, is not sent to our servers.
Your account. If you sign up, we store your email address and your password. Passwords are stored in hashed form by our authentication provider, so nobody at GenerateQR.link can read them.
Dynamic QR codes. We store the name you give each QR code, its destination (a web address, or an email address, phone number or WhatsApp number with an optional message, depending on the type you choose), its design settings (colors, shapes, frame text and the logo image if you add one) and its short code, linked to your account. Anything you type there is stored on our servers so the QR code can redirect to it, so do not use dynamic QR codes for secrets.
Scan statistics. When someone scans a dynamic QR code, we record the date and time, the approximate location (country and city), the device type, operating system, browser, and the referring page when available. We do not store the IP address of the person scanning and we do not try to identify them.
Technical data. Our hosting and network providers may keep standard server logs (such as IP address, browser type and pages requested) for security and to keep the service running.
3. Why we use your data
- To provide the service you ask for, such as your account, your dynamic QR codes and their statistics (performance of a contract).
- To keep the service secure and prevent abuse such as phishing or malware links (legitimate interest).
- To show advertising that keeps the service free, where you have given consent (consent).
4. Service providers
We rely on trusted providers to run the site: Supabase (accounts and database, hosted in the EU), Cloudflare (network, redirects for dynamic QR codes and cookieless visit statistics), IONOS (web hosting), Resend (sending account emails such as the confirmation and password reset messages, which uses your email address) and Google (analytics and advertising through Google Analytics and Google AdSense). Some of these providers may process data outside the European Economic Area, protected by safeguards such as standard contractual clauses.
5. Cookies and local storage
When you log in, your session is kept in your browser's local storage. This is necessary for the account to work. We use Google Analytics 4 to measure how the site is used, Cloudflare Web Analytics to count visits without cookies, and our advertising partner Google AdSense may use cookies to show ads. Google Analytics cookies are set only if you accept them. Cloudflare Web Analytics sets no cookies and gives us only aggregate statistics. In the European Economic Area, the United Kingdom and Switzerland these are set only after you consent through the message shown on the site. Read our Cookie Policy for details, including how to change your choice.
6. How long we keep data
We keep your account data while your account exists. When you delete a dynamic QR code, its statistics are deleted with it. To delete your whole account, write to us at [email protected] and we will remove it.
7. Your rights
You can ask us to access, correct, delete, restrict or export your personal data, and you can object to its processing. Write to [email protected] and we will answer as soon as possible. If you are not satisfied, you have the right to complain to your data protection authority. In Spain this is the Agencia Española de Protección de Datos.
8. Children
The service is not directed to children under 14, and we do not knowingly collect their personal data.
9. Links to other sites
QR codes and pages on this site can point to third-party websites. We do not control them and are not responsible for their content or privacy practices.
10. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with its date at the top.
11. Contact
Questions about privacy: [email protected].