This policy explains what ScanQR (“we”, “us”) does and doesn’t collect when you use scanqr.org (the “Site”). Because scanning happens inside your browser, we never receive the images you scan or the QR codes you read. The QR code generator works differently, as explained below.
What stays on your device
When you upload an image, paste a screenshot, or use your camera, ScanQR decodes the QR code locally in your browser. The image, the camera feed, and the decoded content are not uploaded to our servers, and we can’t see them.
The camera starts only after you choose Start Camera and allow access in your browser. Video frames are used to find a QR code and are not recorded or sent anywhere. You can stop the camera at any time, or withdraw permission in your browser’s site settings.
If a QR code contains a link and you open it, your browser connects to that website directly. That site’s own privacy practices apply, and we have no control over them.
Optional scan history
ScanQR saves your last 30 scans in your browser’s localStorage. If you turn history off in History & Settings, nothing is saved. That data stays on your device and is never sent to us. You can clear it from the same panel, or by clearing your browser data.
Export JSON and Export CSV create a file on your device. Because history lives in your browser profile, anyone who can use that browser can read it, so we suggest leaving history off on shared computers.
QR code generator
Creating a QR code works differently from scanning one. When you use our QR code generator, we store the QR code you create, which contains the content you entered, on our servers for about one hour inaccessible by anyone. It is then deleted automatically.
We use stored QR codes only to run the generator. Because a QR code holds what you typed, avoid entering Wi-Fi passwords, personal details, or other sensitive information unless you’re comfortable with it being stored for that hour. Download your QR code as soon as it’s ready.
What we collect
We don’t ask you to create an account, and we don’t collect your name, address, or payment details. We do process the following:
- Technical data from your visit. Like most websites, our server and hosting provider (Hostinger) process your IP address, browser and device type, the pages you request, and timestamps. We use this to deliver the Site, keep it secure, and fix problems.
- QR codes you generate. If you use the generator, we store the QR code and the content you entered for about one hour, as described above.
- Usage analytics. We use Google Analytics to see which pages are visited, roughly where visitors come from, what devices they use, and how they move around the Site. We don’t send the contents of your scans to Google Analytics.
- Advertising data. Some pages show ads from Google AdSense, which may collect identifiers and browsing information as described below.
- Messages you send us. If you email support@scanqr.org, we receive your email address and whatever you write.
- Files saved by your browser. ScanQR can store its own files (a service worker cache) so it loads faster and works offline. These files are the app itself, not your scans.
Cookies, analytics and ads
ScanQR is free and is supported by ads. These services may set cookies or use similar identifiers on your device:
| Service | What it does | What it may use | Your controls |
|---|---|---|---|
| Google Analytics | Measures traffic and how the Site is used | Cookies and similar identifiers, approximate location from your IP address, device and browser details | Analytics opt-out add-on |
| Google AdSense | Shows ads that help keep ScanQR free | Cookies and device identifiers; ads may be personalized | Google Ads Settings, aboutads.info, youronlinechoices.eu |
Google and its advertising partners may use cookies to show ads based on your visits to this and other websites. To see how Google uses data from sites like ours, read How Google uses information from sites or apps that use its services.
Where the law requires it, such as in the European Economic Area, the United Kingdom, and Switzerland, we ask for your consent before using cookies or similar technologies for ads or analytics, and you can change your choice at any time.
We never give advertisers or analytics providers the contents of what you scan. You can also block or delete cookies in your browser settings. The scanner itself doesn’t need cookies to work.
How we use information
- To run, secure, and fix the Site.
- To understand how the Site is used and to improve it.
- To show ads that fund ScanQR.
- To reply when you contact us.
- To meet legal obligations and protect our rights.
We don’t sell your email address or scan data.
Who we share it with
- Google, for Analytics and AdSense.
- Hostinger, our hosting provider, whose servers hold the data we store, including generated QR codes during their hour.
- Authorities, when we’re legally required to respond to a lawful request, or need to protect our rights or the safety of others.
We can’t share the content of your scans with anyone, because we never receive it.
How long we keep it
- Scans and images: we keep none. They never reach us.
- Generated QR codes: about one hour, then deleted automatically.
- Local scan history: until you clear it or clear your browser data.
- Analytics data: for the retention period set in our Google Analytics account.
- Server logs: for a limited period, as needed for security and operations.
- Support emails: for as long as needed to help you and meet legal obligations, then deleted.
Your choices and rights
You’re in control of the following:
- Camera: allow or block it in your browser’s site settings.
- History: turn it off or clear it in History & Settings.
- Cookies and ads: use the controls in the table above, or your browser settings.
Depending on where you live, including the EEA, the UK, and California, you may have the right to ask what personal information we hold about you, and to ask us to correct, delete, restrict, or stop using it. We hold very little (mainly support emails, and generated QR codes that are deleted after about an hour), so the easiest way to make a request is to email support@scanqr.org. We may need to confirm it’s you. You can also complain to your local data protection authority.
If GDPR or UK GDPR applies to you, we rely on your consent for non-essential cookies, and on our legitimate interests in running, securing, and funding the Site for everything else, including replying to your emails.
The Site doesn’t change how it collects data when your browser sends a Do Not Track signal, because there is no agreed standard for responding to it.
Children
ScanQR is a general-purpose QR code and barcode scanner that can be used by people of all ages. It is not designed specifically for children, and users do not need to create an account or provide their age to use the scanner.
We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@scanqr.org so we can review the matter and take appropriate action, including deletion where required by law.
Changes to this policy
We’ll update this policy when our practices change, for example if we add a new tool or service. The date at the top shows the latest revision. If a change significantly affects how we handle your data, we’ll say so on this page.
Contact us
Questions, requests, or complaints about privacy? Email support@scanqr.org