Privacy policy

Who this covers

It applies if you visit the site, make a QR code or barcode without signing in, open an account, or pay for a plan.

It does not apply to websites you encode in a code. Those sites have their own policies. If you print a static code and someone scans it, that scan goes to whatever you put in the code, not to us.

ForQRCode Chrome extension

Tab URL, link URL, selected text, and image URL are used only to build a QR when you click the toolbar or a context menu. Those values are sent to forqrcode.com when generating a preview (POST /api/generate/qr) or when you open the website. The extension does not record browsing history, does not run in the background on every page, and does not sell data.

What we collect

You can make a static QR code or barcode with no account. We still see ordinary web logs: IP address, browser, pages viewed, and the language you picked.

When you save work or pay, we collect more:

• Name, email, and a hashed password if you create an account
• Name and email from Google if you sign in that way
• Payment status from Stripe. Stripe holds the card. We do not store full card numbers.
• Logos, payloads, and files you save, stored on Amazon S3
• For dynamic codes and short links: scan time, device type, referrer, and a rough location from IP, so the dashboard can show stats
• Prompts and related files if you use AI QR generation, sent to the model provider so the image can be built. Do not put secrets in a prompt.

How we use it

We use this data to run the generator, keep you signed in, show scan stats you asked for, bill a plan, stop abuse, answer email, and fix pages that confuse people.

We do not sell your personal information for money. Some measurement or ad cookies can count as a "sale" or "share" under California law. Email hi@forqrcode.com if you want that turned off.

Cookies

We set a session cookie when you sign in and a NEXT_LOCALE cookie so the site stays in the language you chose. Stripe sets its own cookies on checkout. You can block cookies in the browser. If you block the session cookie, you will not stay signed in.

Who we share with

We share data with companies that help us run the site: hosting, Amazon S3 for files, Stripe for payments, Google for sign-in, and the AI image provider when you request an AI QR. They are supposed to use the data only for that work.

We also share data if the law requires it, or if we sell or merge the business, in which case this data would move with it.

Where it lives

We store data in the United States. If you use ForQRCode from another country, your data is transferred there. US privacy law is not the same as the GDPR. Using the site means you accept that transfer.

How long we keep it

Account data stays while the account is open. Scan records follow the retention on your plan. If you delete an account, we remove or anonymize personal data we no longer need, except records we must keep for tax, security, or a legal claim.

Your rights

Depending on where you live, you may ask for a copy of your data, a correction, deletion, a restriction, or an export. California residents can ask what we collected and whether we sold or shared it, and can opt out. We will not treat you worse for asking. We do not give your name and email to other companies for their own marketing.

Email hi@forqrcode.com to use these rights. We will need to confirm it is you. Some requests we cannot honor, for example a payment record we must keep. We do not honor browser Do Not Track signals. Browser cookie settings are the practical way to limit extra cookies.

Children

ForQRCode is not for children under 13. We do not collect data from them on purpose. If you think a child under 13 opened an account, write to hi@forqrcode.com and we will delete it.

Changes

We will post updates on this page. The date at the top is when we last changed it. If a change is material, we will also email the address on the account when we can.

How to reach us

ForQRCode, 11781 NE Glisan St, Portland, Oregon 97220, US. Privacy mail: hi@forqrcode.com.