Privacy Policy

Last updated 4 September 2026

This page explains what QR Studio Pro does with your data. The short version: the codes you generate are never stored on our servers, and the only personal detail we hold is an email address — and then only if you buy Pro or ask us to sign you in.

What we process

The content you encode. Text, URLs, contact details or Wi-Fi credentials you type are sent to our server, rendered into an image, and returned to your browser. They are held in memory for the duration of that request and never written to a database or log. This is true whether or not you have an account, and it does not change when you buy Pro.
Usage counters. A cookie records how many downloads you have taken this month so we can apply the free allowance. It contains a number and a month — nothing that identifies you, and nothing that reaches our database.
Your email address, if you buy Pro or request a sign-in link. We store it so that Pro follows you rather than one browser, and so we can send you a receipt and a way back in. We never sell it, never share it for marketing, and never send you anything you did not ask for.
Your purchase record. The amount, currency, date and Stripe reference for anything you buy. Payment itself is handled entirely by Stripe; we never see or store your card details.
Sign-in activity. When you request a sign-in link we record the date, your IP address and a one-way hash of the link — never the link itself — so that the link can only be used once and so we can rate-limit abuse. These records are deleted seven days after they expire.
Sessions. When you sign in we store the date, expiry and the browser's user-agent string, so you can be signed out again.

Legal basis

We process your email address and purchase record to perform the contract you entered into when you bought Pro. Sign-in and rate-limiting records are processed under our legitimate interest in keeping the service working and not being used to send unsolicited mail. Purchase records are additionally retained under a legal obligation — see How long we keep things below.

Cookies we set

qsp_usage — free download counter, expires after 90 days.
qsp_session — identifies your signed-in account, expires after 90 days.
qsp_entitlement — the older, browser-only Pro marker, still honoured for anyone who bought before accounts existed. Expires after 1 year.

All three are strictly functional. None of them tracks you across other websites.

How long we keep things

Sign-in links: deleted seven days after they expire.
Your account: until you delete it.
Purchase records: six years from the end of the relevant accounting period. UK tax law requires us to keep records of sales, so these survive the deletion of your account — including the email address the purchase was made under. We cannot delete them earlier and neither can you.

Advertising

The free tier is supported by advertising served by Google AdSense. Google and its partners may use cookies or device identifiers to serve and measure ads, including personalised ads based on your prior visits to this and other websites. You can opt out of personalised advertising in Google Ads Settings, or review how Google uses data at policies.google.com/technologies/partner-sites.

Visitors in the EEA, UK and Switzerland are shown a consent prompt before personalised advertising cookies are set, and may withdraw consent at any time. Pro users are never shown ads and no advertising scripts load for them.

Analytics

We use Cloudflare Web Analytics to count page views. It sets no cookies and records no personal data, IP addresses or cross-site profiles, so there is nothing to consent to and nothing about you to export or delete.

Payments

Payments run through Stripe. Their handling of your data is governed by the Stripe Privacy Policy. We receive only a confirmation that a payment succeeded.

Your rights

If you have an account you can see everything we hold about you on your account page — that page is the export; there is nothing else. The same page deletes the account outright: your email address, your sessions and any unused sign-in links are erased immediately and irreversibly, which also ends Pro access. The payment record itself is retained as described above.

If you have never signed in, we hold nothing about you at all, and clearing your browser cookies removes everything this site has stored — note that this also clears a Pro purchase held only on that browser.

You also have the right to complain to the Information Commissioner's Office if you think we have handled your data badly. We would rather you told us first.

Contact

This site is operated by Moxu Ltd. Questions about this policy: martinblakeley01@gmail.com.