Privacy
We store your name, email and password hash to provide your account. Google sign-in supplies your verified email and profile name. Passwords are not stored as plain text.
Scan records contain the QR code, destination, device category and time; older records may contain aggregate totals. These scan records do not store visitor IP addresses. Hosting and security providers may retain connection logs.
Essential cookies maintain your session and language choice. Google reCAPTCHA helps prevent abuse. Temporary IP-derived identifiers are used for rate limiting. Google services follow Google’s privacy policy and terms.
QR short links are public. Account details and analytics require sign-in. A separate public description page is only published when you choose to publish it; it may be indexed by search engines. Do not publish confidential information. You can edit your profile and unpublish your description page in your dashboard.
Donations are optional. The PayPal link takes you to PayPal, which processes the payment under its own privacy policy. FreeQR does not collect your payment card details.
New analytics may include approximate country and city, browser, hour and source categories. The IP is used transiently for local lookup; it is not stored in analytics or sent to a geolocation API. Team members see only explicitly shared QR data. Security logs record account actions and session device labels; API secrets are hashed and webhook secrets encrypted. Weekly email reports are opt-in and can be disabled in Reports. Static Wi-Fi, contact and text QR content is generated on your device and has no server scan tracking.