Privacy Policy

1. Overview & Scope

This Privacy Policy governs the manner in which FreeQR Maker (“FreeQR Maker”, “we”, “our”, or “us”) operates its website and web application accessible at freeqrmaker.com.

We are dedicated to safeguarding the privacy and digital security of our visitors and users. This document details the principles, operational practices, and legal frameworks under which our services are delivered, specifically clarifying how data is handled when you generate, customize, and export Quick Response (“QR”) barcodes.

By accessing or using FreeQR Maker, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of our data practices, please discontinue use of the service.

2. Client-Side Architecture (Local Processing)

FreeQR Maker is engineered on a pure client-side execution model. This design fundamentally differentiates our utility from typical online barcode services:

• Local Mathematical Generation: The algorithms that calculate the Reed-Solomon error correction and encode data into the two-dimensional matrix execute directly within your browser's JavaScript engine using standard HTML5 Canvas APIs.
• No Upstream Transmission of Payload Data: The values you provide—such as URLs, Wi-Fi credentials, contact cards (vCard), WhatsApp numbers, SMS messages, and text notes—remain entirely in your device's volatile memory. This data is never transmitted over the internet to our backend servers.
• Local Graphic Processing: Any custom logo or graphic file you upload for placement in the center of a QR code is read via the browser's local File API and drawn onto the canvas in-memory. The image is never uploaded to, stored on, or processed by an external server.

3. Information Processed

Depending on the functionality you choose to utilize, the following categories of data may be processed locally on your client device:

• Website URLs: Domain names, file paths, and destination parameters.
• Wi-Fi Parameters: Network SSID, security protocol (WPA/WPA2/WPA3), and network passphrases.
• Contact Cards (vCard): Names, phone numbers, email addresses, organization titles, and physical addresses.
• Communication Targets: Telephone numbers and pre-filled message bodies for WhatsApp, SMS, and Email.
• Geographic Coordinates: Latitude and longitude queries entered for map pinpoints.
• Design Preferences: Module styles, corner shapes, hex color codes, and export dimensions.

Note: All items listed above are ephemeral and exist solely within your active browser session. Closing the tab or refreshing the page clears this data from memory.

4. Information We Do Not Collect

To maintain full transparency, our technical infrastructure is intentionally built without the capabilities to harvest user data:

• We do not require user account registration, passwords, or authentication credentials.
• We do not record, store, or monitor the destination contents of generated QR codes.
• We do not track, intercept, or log scans executed on the generated static QR codes.
• We do not collect credit cards, billing addresses, or payment processing information.
• We do not sell, rent, monetize, or disclose user data to data brokers, ad networks, or third parties.

5. Technical Infrastructure & Server Logs

When you access our web application, standard network requests are processed through our hosting infrastructure and content delivery network (CDN) providers (such as Vercel and Cloudflare). In accordance with standard internet protocol, edge servers may log transient technical metadata:

• Internet Protocol (IP) address of the requesting client.
• Browser user-agent string (identifying browser version and operating system).
• Timestamp of access, HTTP status codes, and referring URL headers.
• Volume of data transferred.

These access logs are maintained solely for diagnostic purposes, DDoS mitigation, rate-limiting malicious automated traffic, and ensuring server availability. They are aggregated, rotated regularly, and never correlated with individual QR code payloads.

6. Cookies and Local Storage

FreeQR Maker does not utilize tracking cookies, cross-site profiling cookies, or third-party advertising pixels.

We may utilize the browser's standard localStorage API solely to store functional, client-side preferences (such as your chosen design palette or selected export format) across visits. You have full control over this storage through your browser settings, where you may inspect, disable, or delete local storage keys at any time.

7. Third-Party Links & External Endpoints

Our platform generates static QR codes that direct scanners to URLs and endpoints specified entirely by the user. FreeQR Maker does not operate as an intermediary proxy or dynamic URL redirect service.

Once an individual scans a QR code generated via our site, they are redirected directly to the final external domain. We exercise no control over, and assume no responsibility for, the content, privacy policies, data collection practices, or security measures of any third-party websites or services. Users should consult the respective privacy notices of any destination sites they visit.

8. Data Security & Storage

We enforce modern web security protocols across our entire platform:

• Transport Layer Security: All assets are delivered strictly over encrypted HTTPS protocols using current TLS 1.3 standards.
• Strict Security Headers: Our web server emits strict security headers (including Content-Security-Policy, X-Content-Type-Options, and Referrer-Policy) to prevent cross-site scripting (XSS) and clickjacking vectors.
• Zero Data Retention: Because we do not operate a backend database for QR codes, the risk of centralized data breaches, leaks, or exposure is structurally eliminated.

9. Your Rights (GDPR, UK GDPR, & CCPA/CPRA)

Depending on your geographic location, applicable data protection statutes (including Regulation (EU) 2016/679 - GDPR, UK Data Protection Act 2018, and California Consumer Privacy Act as amended by the CPRA) grant individuals specific rights regarding their personal data:

• Right of Access & Portability: The right to request confirmation of data processing and access to personal data.
• Right to Rectification & Erasure: The right to demand correction or complete deletion of stored records.
• Right to Restrict or Object: The right to object to specific processing activities, automated profiling, or sales.
• Non-Discrimination: The right not to receive degraded service for exercising statutory privacy rights.

Operational Implementation: Because FreeQR Maker does not collect, record, or retain personal data or identifiable payloads, our architecture natively fulfills the principle of Data Minimization (GDPR Article 5(1)(c)). We maintain no personal data repositories from which to retrieve or delete user records. For inquiries regarding our compliance posture, you may contact our privacy office.

10. Children's Privacy (COPPA Compliance)

FreeQR Maker does not knowingly solicit or collect personal information from individuals under the age of 13 (or under the age of 16 within the European Economic Area), in compliance with the Children's Online Privacy Protection Act (“COPPA”) and equivalent international regulations. Because our site does not require registration or collect personal identities, minors may safely use our mathematical generator for educational or personal projects without privacy compromise.

11. Changes to This Privacy Policy

We reserve the right to amend or update this Privacy Policy periodically to reflect technological advancements, legal developments, or organizational modifications. Any updates will be published directly to this page with an updated “Last Revised” timestamp. We recommend reviewing this document periodically to stay informed about our data protection standards.