Privacy
The short version: we have no server that could receive your data, no accounts, and no way to identify you. Here is the long version, with the specifics.
Last updated
In one paragraph
What we do not collect
- Anything you type into a generator. No URLs, passwords, phone numbers, email addresses, contact details, coordinates, event details or free text.
- The QR Codes you generate. We never see them and we do not store them.
- Files you select as a logo. They are read by your browser with the FileReader API and never uploaded.
- Names, email addresses or payment details. There are no accounts and nothing is for sale.
- Cookies for advertising, profiling or cross-site tracking. We set none.
How to verify that yourself
Do not take our word for it — the claim is checkable in under a minute:
- Open any generator page.
- Open your browser's developer tools and select the Network tab.
- Type into the fields and watch the request list. Nothing is sent.
- Better still: load the page, switch your device to aeroplane mode, and keep working. Everything still generates and exports.
What is collected
Server request logs
The site is hosted on Cloudflare Pages. Like any web host, the CDN records standard request information — the page requested, a timestamp, an IP address, a user-agent string — for delivery and abuse prevention. We do not aggregate, export or analyse those logs, and they are retained on Cloudflare's standard schedule. This is the unavoidable minimum of putting a page on the internet.
Aggregate page analytics
We may use Cloudflare Web Analytics, which is cookie-free and does not fingerprint visitors. It reports page-level counts — how many people opened a tool page, roughly where in the world, which referrer sent them. It cannot see form fields, and by design it cannot follow an individual across sessions.
If we record product events, they are limited to the categories named in our product spec: a tool page opened, a tool run, an export clicked, a related tool clicked, and the type of an error. Never the content of an error, and never the content of a field.
Local storage
Two things may be stored in your browser, and only when you ask for them:
- Appearance preferences, if you press “Save these settings”. That is the module and background colour, error-correction level, quiet zone and export size. Nothing you typed into a form.
- Shared tool state in the URL hash, if you press “Copy a link to this setup”. Only fields on an explicit allow-list are included, and tools with personal data — Wi-Fi, vCard, plain text — have no share link at all.
Every generator page has a Clear local data button that removes everything QRCodeDojo has stored in your browser. The data is on your device only; it is never synced and we cannot read it.
A word about QR Codes and privacy generally
A QR Code is an encoding, not encryption. Anyone who photographs a printed code can read its contents in a second with a free app. This has nothing to do with us and applies to every code in the world, but it is worth stating plainly:
- A Wi-Fi code on a café card gives the password to everyone who can see the card. Use a guest network.
- A contact code on a poster publishes that contact's details to passers-by.
- Never encode a password, a key, a licence number or anything private.
Third parties
The site loads no third-party scripts, fonts, trackers or advertising. Fonts are the ones already on your system. The only external party in the picture is Cloudflare, which serves the files.
Some tools produce links that point at other companies — wa.me for WhatsApp,
t.me for Telegram, search.google.com for Google reviews. Those are
destinations you chose, reached directly by whoever scans the code. Their privacy policies
apply once someone follows the link; ours stops at the pattern.
Children
The site is a general-purpose utility with no accounts and no personal data collection. We do not knowingly collect information from anyone, of any age, because we do not collect information about people at all.
Your rights
Under the GDPR, the CCPA and similar laws you have rights of access, correction, deletion and portability over your personal data. We hold none, so there is nothing to access, correct, delete or port. If you want the browser-local data gone, the Clear local data button does it immediately, as does clearing site data in your browser settings.
Changes
If this policy changes, the date at the top changes with it. Any change that widened what we collect would be stated in plain language at the top of this page rather than buried in a clause — though the architecture is the real guarantee here: there is no server to send anything to.
Contact
Questions about this policy go to our contact page.