Privacy policy

The essentials first

Content you enter in the generator — URLs, contact details, IBANs, uploaded logos — is processed only in your browser and is not sent to a server. This is not a marketing claim; it follows from the architecture: the QR codes are created entirely on your device.

Controller

Robin Glaeser, sole proprietor
Seitenstettengasse 5/37, 1010 Vienna, Austria
Email: robinglaeser@gmail.com

Hosting

The site is hosted by Vercel Inc. (USA) as a processor, with the server located in Frankfurt am Main, Germany. When the site is accessed, the server processes technically necessary access data in server logs: IP address, date and time, the address requested, the amount of data transferred and the user agent. This data is required to deliver the site and to keep operation secure.

The legal basis is the legitimate interest in a secure, functioning service (Art. 6 (1) (f) GDPR). Logs are kept only as long as needed for operation and security. A data processing agreement is in place with Vercel; any transfer to the USA is covered by the safeguards provided for that purpose.

Analytics

Vercel Web Analytics is used to measure reach. The method is cookie-free and sets no persistent identifiers in your browser. The IP address is processed but not stored permanently; the result is aggregated statistics about page views without recognising individual people.

The purpose is the statistical evaluation of usage to improve the service. The legal basis is the legitimate interest in privacy-friendly reach measurement (Art. 6 (1) (f) GDPR). A consent banner is not required because no cookies or comparable access to your device are needed.

No server-side processing of input

The in-browser generator does not send your input to a server. There are no accounts, no tracking pixel and no dynamic QR codes with a redirect service.

One exception is the optional developer API at /api/qr: it generates QR codes for simple types (URL and text) on the server. Anyone calling it deliberately passes the content as a URL parameter; like any web request, that content is processed in the server logs (see "Hosting"). This does not apply to the normal in-browser generator. Should anything change beyond this, this policy will be updated beforehand.

Your rights

You have the right to access, rectification, erasure and restriction of processing, the right to data portability and the right to object to processing. To exercise them, contact the email address above.

Complaints

You may lodge a complaint with the Austrian data protection authority:
Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.