Privacy Policy

QRWho (qrwho.online) is a free QR code generator and customization studio. You can build QR codes for website links, text messages, Wi-Fi access, contact cards, email, phone and SMS, WhatsApp chats, map locations, calendar events and more; blend a photo or a center logo into artistic codes; pick from designer presets and frames; check that a code scans; and download the result as a PNG or vector SVG — with no account and no watermark.

We do not ask for — and do not collect — personal information. There is no sign-up, no user profile, no newsletter and no payment form on QRWho.

The only information involved in running the site is:

• Technical request data. Like any website, our web host processes standard technical information when your browser requests a page (for example IP address, browser type and the time of the request) in order to deliver the site to you.
• Your design data, kept in your own browser. A small cookie and your browser's local storage remember the QR you are working on and your recent designs. This data stays on your device — see Cookies and Similar Technologies below.

• No names, email addresses or phone numbers — there is no account system.
• No payment or billing information — QRWho has no paid features.
• No analytics, advertising, tracking pixels or cross-site identifiers.
• No copies of the photos you upload or the QR content you type — they are never sent to us.
• No camera footage — the optional scanner reads codes locally and video never leaves your device.
• No precise location — map coordinates only exist if you type them into a QR yourself.

Everything you put into the studio — photos, logos, Wi-Fi credentials, contact details, links, captions — is processed inside your browser by the site's rendering code. Photos are woven into the QR on your device; they are not uploaded to QRWho, and we have no server-side copy of them.

The content you encode is embedded in the QR image you download — that is what a QR code is for. Anyone you show the code to can scan and see that content. Uploaded pictures are referenced only by temporary in-memory browser links that disappear when you close the tab, and they are deliberately never written to the session cookie or your design history.

The limited technical request data described above is used only to serve QRWho securely and reliably (delivering pages, keeping the service stable and safe). The design data stored in your browser is used only to make the studio work for you — restoring your current design when you come back and showing your recent designs.

We do not build visitor profiles, do not personalize advertising, do not send marketing messages, and do not sell or share information about you.

These features run entirely on your device, in your browser:

• QR code generation and all styling (colors, shapes, presets, frames).
• Photo and logo blending, including the artistic/photo QR treatments.
• Scan checking (re-decoding the code with an on-device decoder) and the optional camera / picture scanner used to load an existing code's destination.
• PNG (2048px) and SVG export — the files are produced in your browser and downloaded straight to you.

Our server only delivers the website itself: the app code, page content, and the built-in template artwork and logos shown in the pickers.

Cookie (qrwho-session-v1). This first-party cookie remembers your current studio design — the destination you typed, your style choices, the chosen built-in logo, caption and frame — so a returning visitor lands back on their work. Uploaded pictures are never stored in it. It lasts up to one year and you can delete it any time from your browser settings; doing so simply forgets your current design.

Local storage ( qrwho-history-v1). Your browser keeps your recent designs (up to 12) so the studio's history works. Clearing your browser storage removes them.

Session storage. The landing page briefly caches its rendered showcase codes to load faster; the private admin area keeps an admin sign-in token there — relevant only to the site's operators.

There are no third-party advertising or tracking cookies.

• Web fonts (Google Fonts). The site loads its typefaces from fonts.googleapis.com and fonts.gstatic.com. Your browser requests those files directly from Google, which processes standard request data (such as your IP address) under its own privacy policy.
• Hosting (Vercel). QRWho is served from Vercel's platform, which processes standard technical request data to deliver the pages (see Information We Collect).
• Support / tip links (optional). If the site shows a “support QRWho” link after a download, it points to an external tipping platform (for example Ko-fi). Nothing is sent there unless you click the link, and that platform's own privacy policy then applies.
• Where your QR codes point. When someone scans a QR you made, they reach the website, contact, network or content you chose to encode. Those destinations are third parties of your choosing, not ours.

QRWho uses no analytics, advertising or marketing SDKs.

Because personal design data lives only in your browser, there is no user database on our side holding it. The session cookie persists for up to one year (or until you clear it); your recent-designs history stays until you delete entries or clear your browser storage. Uploaded photos are never retained anywhere. Technical request data handled by our hosting provider is retained under that provider's operational policies.

QRWho is served over HTTPS, and processing your photos and QR content on your own device is itself a privacy safeguard: that data is never transmitted to us. The session cookie is a convenience memory, not an authentication token — it grants no access to any account, because accounts don't exist. No method of transmission or storage is perfectly secure, but the design keeps almost nothing at risk: we hold no personal data about visitors.

QRWho does not knowingly collect personal information from anyone, including children under 13 (or the applicable minimum age in your country). The service requires no personal data to use. If you believe a child has somehow provided personal information to us, contact us and we will address it promptly.

Depending on where you live (for example under the GDPR or the CCPA), you may have rights to access, correct, delete or object to the processing of your personal information. Because QRWho does not collect or store personal information on its servers, there is typically nothing held by us to access or delete. The data that does exist — your current design cookie and recent-designs history — is under your control: clear it any time in your browser settings. If you have questions or a request, contact us (see Contact Us below).

We may update this policy as the product evolves. When we do, we will post the new version on this page and revise the “Last Updated” date. Continuing to use QRWho after changes means you accept the updated policy.

Questions about this policy or your privacy on QRWho? Email us at [insert official QRWho contact email before launch]. (QRWho does not yet publish an official contact email — this placeholder will be replaced with the official address before launch.)