Privacy Policy

1. What This Page Is About

This Privacy Policy explains what information we collect, how we use it, and what choices you have. We keep things simple and honest — your privacy matters to us.

2. We Do Not Collect Your QR Data

QREndless runs 100% in your browser. All QR codes are created, changed, scanned, and downloaded on your device. We do not see, store, or send your QR code data to any server.

• Your QR code content stays on your device only
• We do not track what you type or create
• Images you upload for scanning never leave your device
• CSV files for bulk QR stay on your device
• Your session data is cleared when you close the browser

3. Contact Form Data

If you contact us through our form, we only collect what you give us:

• Your name — so we know who to reply to
• Your email — so we can reply to you
• Your message — your question or feedback

We store this safely in our database (Cloudflare D1) and use it only to reply to you. We regularly review and remove old messages, and retain them no longer than necessary. We never use your contact data for ads or marketing. If you prefer not to share this info, you can email us directly at hello@qrendless.pro.

4. Local Storage (On Your Device)

We use your browser's local storage to save your settings (like your theme choice and current work). This data stays on your device and never goes to any server. You can clear it anytime through your browser settings.

5. Chrome Extension & WordPress Plugin

QREndless is also available as a Chrome extension and a WordPress plugin. Both follow the same privacy-first rules as this site:

• Chrome Extension — 100% offline. Every QR code is generated and scanned inside your own browser. The extension does not send any data to our servers, does not include analytics or ads, and does not set cookies. Your settings stay in your browser's local storage and are never uploaded.
• WordPress Plugin — runs entirely on your own WordPress site. All QR codes are created in your browser; no QR data is ever sent to us. The plugin only talks to WordPress.org to receive standard plugin updates, which is handled by WordPress under its own privacy policy.
• No accounts, no ads, no third-party tracking — neither product collects, sells, or shares personal data.

6. Third-Party Services We Use

We use a few trusted services to run and improve our site. These services may collect some data (like your IP address or browser type) when you visit. We do not control what they collect — please check their policies for details.

7. How We Handle Ads & Cookie Consent

We show ads through Google AdSense to keep our site free for everyone. We use Google's certified Consent Management Platform (CMP) — the consent dialogs are built, hosted, and kept up to date by Google — together with Google Consent Mode v2, which applies your choices to ads and analytics:

You can change or withdraw your consent anytime via the Privacy Options link in our footer (EU/EEA/UK/CH) — see our Cookie Policy for details. This setup is fully compliant with GDPR and ePrivacy laws. Learn more about Google AdSense NPA →

You can opt out of personalized ads anytime through these links:

• Google Ads Settings — control your ad preferences
• Network Advertising Initiative — opt out of interest-based ads
• Digital Advertising Alliance — another opt-out option

8. Your Rights (GDPR)

If you are in the EU/EEA/UK/CH, you have these rights under data protection laws:

• See your data: You can ask what data Google has about you. For Google Analytics, you can use the Google Analytics opt-out browser add-on to disable tracking
• Delete your data: You can ask for your data to be removed
• Say no to ads: You can object to your data being used for ads
• Get a copy: You can ask for a copy of your data in a readable format

To use these rights for Google, visit your Google Account or Google Privacy Controls.

9. Children's Privacy

Our site is safe for all ages. We do not knowingly collect data from children under 13. Google ads are not targeted at children under 13, and we do not allow Google to personalize ads for users under 13.

10. Data Storage & Transfers

Google may store data on servers outside your country. Google follows approved data transfer rules (like the EU-US Data Privacy Framework). See Google Data Transfer Frameworks →.

All QR code creation and processing happens in your browser — we do not have a server-side database for QR data. Only two features store data on our server (Cloudflare D1):

• Contact form — your name, email, and message stored in D1, reviewed and removed when no longer needed (see Section 3)
• Large QR Share Links — only for very complex designs that cannot fit in a URL. Compressed design state stored in D1, auto-deleted after 30 days (see Section 2). Most share links do not use the server at all

11. Security

All QR code creation, scanning, decoding, and enhancement happens on your device — nothing is sent to our servers unless you use the Share feature (see Section 2). Google services use their own security measures as described in their policies.

12. Changes to This Policy

We may update this page from time to time. We will always show the latest date at the top. If you keep using the site after changes, that means you accept the updated policy.

13. Questions?

Email us at hello@qrendless.pro — we are happy to help.

For Google privacy questions, you can also contact Google Privacy Support →.