Privacy

Last updated: 27 June 2026.

Your QR codes stay on your device

Every QR code is generated entirely in your browser. The content you type — the link, text, Wi-Fi password, anything — is never uploaded to our servers. We don't have a copy of it. Downloads and clipboard copies happen locally on your machine.

Analytics

We use a self-hosted Matomoinstance to count visits and which features are used (e.g. “a QR was generated”). It runs without cookies, respects your browser's “Do Not Track” setting, and anonymises IP addresses — so there's no consent banner to click through. We never send the content of your QR codes to analytics, only anonymous event categories (such as the payload type or export format).

Accounts and the API (optional)

The QR generator itself needs no account. If you choose to use the optional extras — saving a dynamic (editable) QR code, the dashboard, or the free API/MCP server — you create a free account with a magic link. The only personal data we store for that is your email address (to sign you in and let you manage your codes). No password, no profile, and we never sell it. For security, each active sign-in session also records the IP address and browser it was created from, so we can protect your account — nothing more. You can permanently delete your account and everything in it from Account settings in the dashboard at any time — we email you a link to confirm first.

Dynamic QR codes and scan analytics

A dynamic QR code points at a short oqr.to link that redirects to your chosen destination, so you can change where it goes without reprinting. When someone scans one, we add 1 to a counter. That counter is grouped by approximate location (from the network, not GPS), a coarse device type (e.g. mobile or desktop), whether the connection was a phone network or a datacentre, the referrer if any, and the hour. We do not store IP addresses, postal codes, full user-agent strings, or any identifier at all. There is no record of an individual scan to look up, so two scans by the same person are indistinguishable from two scans by different people, and nothing can be traced back to anyone.

Because those counters are the only thing we keep, we can show a code's owner where and when their code gets scanned without ever tracking the people scanning it. A town or city is only ever named once at least fivescans have come from it; below that it is grouped into an anonymous “other” total. Raw scan records are kept for 7 daysfor troubleshooting and then deleted. Static QR codes (the default) don't route through us at all, so they generate no scan data.

The Location tool

If you use the optional Location feature, the interactive map is the one part of OpenQR that talks to third parties:

• Map tiles are served by CARTO (on OpenStreetMap data).
• Address searches are sent to OpenStreetMap's Nominatim service. Your search text and IP address reach them in order to return results.
• If you tap “My location”, your browser asks your permission before sharing GPS coordinates.

These calls only happen when you actively use the map. If you never open the Location tool, nothing is sent.

No profiles, no selling data

We store no marketing profiles and never sell data. The only personal data we ever hold is the email address of people who opt in to an account (above). Tips are handled by Buy Me a Coffee and code lives on GitHub — both have their own privacy policies when you choose to visit them.

Open source

Don't take our word for it — OpenQR is open source. You can read exactly what it does, or run your own copy.