Privacy Policy
Version 2026-09-26 · Last updated 2026-09-26
The short version
- Static codes (Wi-Fi, contact, text…) are made on your device. We never see them.
- For editable codes we store the destination link and a scrambled version of your edit secret. No name, no email, no account.
- We count scans by country, device type and referring website. We don't store anyone's IP address, whether they create codes or scan them.
- No ads, no tracking cookies, and we never sell your data.
This summary is here to help. The full text below is what counts.
1. Who is responsible
quickqr.page is run by Vietnam Open Source Technology Company Limited (Công ty TNHH Công nghệ Mã Nguồn Mở Việt Nam), 2174/24A Huỳnh Tấn Phát, Xã Nhà Bè, Thành phố Hồ Chí Minh, Vietnam, enterprise code 0318424321. We decide how your data is used (under European law we're the "controller"). Privacy questions and requests: hello@quickqr.page.
2. What we collect and why
| What | Why | How long we keep it |
|---|---|---|
| What you type into the generator for static codes | Nothing: it stays in your browser. | Never collected |
| Editable codes: the destination link, when the code was created and changed, the version of our terms you accepted, and a one-way scrambled version (hash) of your edit secret | To send people who scan to your link, and to let only the edit-link holder change it | Until you delete the code. After that we erase the link at once, but keep the code's number and dates so the number is never given to anyone else. |
| Scans of editable codes: time, country, device type (iPhone, Android, computer or other), and the website the scan came from, if any. Nothing that identifies the person scanning. | To show the owner a scan count, and to spot abuse | Details: 3 months. Daily totals per code: as long as the code exists. |
| Refused links: when our safety check refuses a link for an editable code, the website's domain name (not the rest of the link) and which rule refused it | To improve our safety rules and fix mistakes | 3 months |
| IP address of visitors and people who scan | To find the country, limit how often one address can create or change codes, block bots, and keep the service secure | Not stored in our database. Our hosting provider Cloudflare handles it briefly for these purposes. |
| Reports: the code, what's wrong, your explanation, and your name and email if you give them | To review the report, tell you the outcome, and meet our legal duties on illegal content | 2 years |
| Emails you send us (questions, appeals, privacy requests) | To answer you | As long as needed to handle your message, at most 2 years |
You don't have to give us any personal data. Your IP address is needed for any website to work; your email and name are always optional. If someone reports a code, the report may mention you: we get that information from the person reporting.
We don't use your data for advertising, we don't build profiles, and we don't make decisions about you with legal effects based only on automatic processing. The one automatic decision we make is checking links for safety (see our Terms): it's about the link, not about you, and a person reviews any appeal.
3. Our legal reasons
Under European (GDPR) and UK law:
- To provide what you asked for (a contract): running your editable code, sending the email you requested.
- Our legitimate interests, balanced against your rights: keeping the service safe and free from abuse, checking links, counting scans for code owners. You can object (see section 7).
- Legal duties: handling reports about illegal content, and answering lawful requests from authorities.
Under Vietnam's Personal Data Protection Law (Law 91/2025/QH15, Article 19), we don't ask for consent because we only process data: to carry out what you asked us to do (running your code, sending the email you requested); to protect people's legitimate rights and prevent violations of the law (safety checks, rate limits, handling reports); and where another law requires it. We don't collect sensitive personal data, and our scan statistics aren't linked to any person: they contain no IP address, cookie or other identifier.
If we ever want to use your data for something that needs consent, such as personalized ads, we'll ask first. It will always be your choice, and you can change your mind at any time.
6. Data outside your country
Our providers process data in the USA and other countries. Where European or UK law applies, these transfers are protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We keep the data we send abroad to the minimum needed, as described above.
7. Your rights
You can ask us to:
- see the data we have about you and get a copy,
- correct it or delete it,
- limit how we use it, or object to how we use it,
- take it with you to another service.
Email hello@quickqr.page. A person will answer. We reply within 2 working days if you want us to stop or limit using your data, within 10 days if you want to see or correct it, and within 20 days if you want it deleted. We finish the request within 15 days (30 days for deletion). Because we don't have accounts, we usually can't tell which data is yours. For an editable code, send us its edit link, or simply use the edit link to delete the code yourself.
You can also complain to a data protection authority: in the EU, the one in your country; in the UK, the ICO; in Vietnam, the Department of Cybersecurity and High-Tech Crime Prevention (A05) of the Ministry of Public Security. We'd appreciate the chance to fix things first.
8. Children
quickqr.page isn't made for children under 13, and we don't knowingly collect data from them. If you think a child has sent us personal data, email us and we'll delete it.
9. Security
We use encrypted connections (HTTPS), store edit secrets only in scrambled (hashed) form, keep as little data as we can, and limit who can access our systems.
10. For people in the USA
We don't sell or share personal information for targeted advertising, as defined by California law, and we don't let other companies track what you do on our site over time or across other websites. Because we don't track you, "Do Not Track" browser signals don't change anything here. You can see, correct or delete your data as described in section 7.
11. Changes to this policy
If we change this policy, we'll update the date at the top. Before we add anything new, such as ads, we'll update this page first and, where needed, ask for your consent.