Privacy Policy

The short version

QR codes are generated entirely inside your browser. The text you type, any password you enter, and any logo you add are never transmitted to FigQR or anyone else. We do not have accounts, and we do not ask for your email.

What happens to what you type

Everything you enter into the generator stays in your browser's memory for as long as the page is open, and is discarded when you close it. Logo images are read locally with the browser's FileReader API — they are never uploaded.

You can confirm this yourself: open your browser's developer tools, switch to the Network tab, and generate a code. No request is made.

Scans are invisible to us

Because your destination is encoded directly into the code rather than routed through a redirect, scans never touch our servers. We cannot count them, locate them, or see them at all — even if we wanted to.

Server logs

The site is hosted on AWS Amplify and served through Cloudflare. Both keep standard technical logs — IP address, browser type, requested page, timestamp — for security and reliability. These are ordinary infrastructure logs, not analytics we have built, and we do not use them to profile visitors.

Visitor analytics

We use Cloudflare Web Analytics to see which pages people visit and roughly where in the world they come from. It exists so we know which guides are worth writing more of — nothing else.

It was chosen because of what it does not do. It sets no cookies, stores nothing on your device, does not fingerprint your browser, and cannot follow you to any other site. That is also why you have not been asked to accept anything: there is no storage to consent to.

To count a visit, Cloudflare processes your IP address at the moment of the request. It is not stored against you or used to build a profile. Cloudflare acts as our processor under a data processing agreement, and the legal basis is our legitimate interest in knowing whether the site is useful (Art. 6(1)(f) GDPR). Their own privacy terms are atcloudflare.com/privacypolicy.

This measures pages, not codes. What you type into the generator — links, WiFi passwords, contact details, logos — is never part of it, because that data never leaves your browser in the first place.

Counting downloads

When you download a code, we record six things: the file format you chose, the type of content it holds — a link, a WiFi network, a contact card — the page you downloaded it from, that page's language, and the browser and operating system you used. That is the entire message.

What is inside the code is never part of it. Not the address, not the password, not the contact details, not a logo you uploaded. Those are built in your browser and never sent anywhere, which is the point of the whole product.

There is nothing in the record that could be traced back to you — no cookie, no identifier, no session. The page and the language are the page's, not yours: they say a code was made on the WiFi guide in German, and nothing about who made it. The browser and the system are one word each — “safari”, “ios” — worked out from a header your browser already sends to every site it visits; that header is read and thrown away, never stored. It exists so we can tell whether anyone uses the SEPA option, whether the vector formats are worth maintaining, whether a translation was worth writing, and whether downloading actually works in every browser. The legal basis is our legitimate interest in knowing which parts of the tool earn their keep (Art. 6(1)(f) GDPR).

Cookies

FigQR sets no cookies of its own and uses no tracking storage. Cloudflare may set a security cookie to identify malicious traffic.

If this changes

Analytics is named above. We may add advertising in future to cover running costs. If that happens, this page will say so before it goes live, with the date above updated and the specific providers named. It will not change the core commitment: the content of your QR codes stays in your browser.

Your rights

Under the GDPR you have rights of access, correction, deletion and portability over personal data held about you. Since we hold none, there is generally nothing to act on — but if you believe otherwise, get in touch and we will respond.

Contact

Questions about this policy can go to hello@figqr.com. Operator details are on the Impressum page.