Privacy
We do not collect it.
The short version: what you type to build a QR code never leaves your browser. Analytics are opt-in and never see it either way. There is no account.
Last updated 12 August 2026
What we do not collect
The content of your QR codes never reaches us. WiFi passwords, UPI IDs, phone numbers, email addresses, contact details, coordinates — all of it is encoded on your device by JavaScript running in your browser. There is no upload step, because there is no server-side generator.
You do not have to take our word for it. Open your browser's developer tools, watch the network tab, and generate a code. Nothing you type ever appears in a request — the only traffic you might see is an analytics page-view, and only if you have accepted it below.
What is stored on your device
Codes you generate are saved locally so you can find them again. This uses your browser's own storage and never leaves your device. Clearing your browser data deletes it, and so does the delete action in the app.
- Your generated code history, stored in IndexedDB on this device.
- A single flag recording that you have seen the introduction, so it is not shown every visit.
Analytics
We use Google Analytics to see which pages get used, and it stays off until you say so. On your first visit you will see a banner; declining, or just not answering, keeps it off — no analytics cookie is set either way. Accepting sets one, and you can withdraw at any point by clearing this site's data and reloading.
What accepting shares is standard page-view data: the path you are on and coarse device and location information. For the generator, that path is the type — /create/whatsapp-qr-code-generator, say — never the number, message or password typed into it, because that never reaches us regardless of the analytics choice.
Advertising and personalisation signals stay switched off permanently, whether or not you accept analytics. This site runs no advertising and has nothing to personalise, so there is no reason to ever turn them on.
Separately, we use Vercel Speed Insights to measure how fast pages load. It is cookieless, carries no personal data, and is not part of the choice above — it runs the way a host's own performance metrics would, regardless of what you decide about analytics.
Hosting and logs
The site is served as static files by our hosting provider, which keeps standard server logs including IP address and user agent for security and abuse prevention. This is ordinary infrastructure logging that any website receives, and we do not use it to identify individuals.
Third parties
No advertising networks, social media pixels or embedded widgets. Fonts are served from this site rather than fetched from an external provider, so loading a page never tells anyone else you visited, cookies or not. The one third party is Google Analytics, described above, and it only activates once you accept it.
Your rights
Since we hold no personal data about you, there is nothing for us to export, correct or delete on request. Everything the app stores is on your device and under your control: clear it from within the app, or clear your browser's site data.
Changes
If this policy changes materially — in particular if optional accounts are introduced, which would involve storing an email address for people who choose to sign up — the change will be reflected here with a new date, and account features will remain opt-in.