Privacy Policy

Last updated: 2026-10-12

This notice explains in plain language what happens to data when you use QRCode-24 (qrcode-24.com).

Who is responsible

The controller for this website is the operator named in the Impressum. For privacy questions, write to info@qrcode-24.com.

The generator runs in your browser

Everything the generator does happens in your browser. The content you type into the form, uploaded logos and your style settings are never sent anywhere; they are processed on your device and not uploaded.

Your settings are saved in your browser's local storage under three keys: "app:qr.state" (your QR content and design), "app:theme" (light/dark setting) and "app:lang" (interface language). Clearing your browser data removes them. The site does not set cookies and keeps no persistent visitor identifier; a former visitor-id key ("app:vid") is no longer written and is removed automatically.

Visit counter

The site runs a small first-party visit counter - there are no third-party analytics services and no advertising. When a page loads, your browser sends one beacon to our own server containing: the page name, the URL path, the interface language and, when present, the host name of the referring website. An automated-browser flag is included when one is detected. After your first interaction (for example a tap or a scroll) a second one-time signal is sent that marks the visit as human.

The server stores: a daily-rotating visitor id derived by salting and hashing your IP address together with your user-agent string and the date (the IP address itself is never stored, and the id changes every day, so returning visitors cannot be recognized across days), the page, the URL path, the interface language, the referrer host, the time of the visit, the user-agent string, bot flags and an interaction flag.

Visits to the same page are counted only once within a short window (10 seconds). The data serves only site statistics; it is not sold or shared. Visitor statistics are retained for 13 months and then deleted automatically.

Fonts and third parties

The typeface (Readex Pro) is served from our own server: no request goes to Google Fonts or any other CDN, and nothing is loaded from third-party domains. No cookies are set.

Share buttons

The share buttons are ordinary buttons that open the network's own share page (for example Facebook or WhatsApp) with the address of the current page. Nothing is sent to those networks until you click one.

Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf. Like any web server, the provider processes server logs (IP address, time, requested page, user agent) in order to deliver and secure the site; server logs are retained for the period set by the hosting provider.

Legal bases

The visit counter and the server logs are processed on the basis of Article 6(1)(f) GDPR (legitimate interest in the secure and economical operation of the site). The local-storage keys listed above store only your own settings for the service you are using; they are therefore strictly necessary within the meaning of § 25(2) No. 2 TDDDG.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15-21 GDPR), and the right to complain to the Berliner Beauftragte für Datenschutz und Informationsfreiheit. To exercise your rights, or to have your counter data deleted, write to info@qrcode-24.com.