Privacy Policy

QR Wallah is built to need as little of your data as possible. This page explains exactly what happens when you create a QR code.

Content you encode

Links, Wi-Fi details, contact cards and other content are sent to our rendering service only so they can be turned into a QR pattern. We never visit, fetch, or preview links. Unless you save a code to an account, nothing is stored after the response is returned. Request bodies are not logged.

Logos you upload

Logos are resized in your browser, sent with the render request, decoded and re-encoded in memory, and discarded as soon as your QR code is rendered. They are never written to disk and never logged. Only PNG, JPEG and WebP data reaches the server (SVG files are converted to PNG in your browser first).

Static QR codes don't track anyone

Static codes store the content inside the pattern itself, so scanning goes straight to your link. There's no redirect, so neither we nor anyone else can count scans or see who scanned. No account is needed.

Accounts and saved codes

If you create an account, we store your email address, a salted scrypt hash of your password (never the password itself), and the codes and folders you save, including their content and design. Deleting a code deletes it and its scan records.

Dynamic codes and scan analytics

Dynamic codes encode a short link on this service that redirects to your destination. When someone scans one, we record the time, a coarse device type (mobile, tablet or desktop) and operating system family, and an anonymous visitor hash. The hash combines the visitor's IP address and browser with the date and a server secret, changes every day, and is used only to count unique visitors per day. We never store IP addresses, full browser strings, referrers or locations. Scan records are deleted after a year.

Cookies and analytics

Signing in sets one essential, HTTP-only session cookie. We don't use tracking cookies or third-party analytics. Your theme preference is saved in your browser's local storage and never leaves your device.

Technical data

To prevent abuse, the service keeps a short-lived, in-memory count of requests per IP address for rate limiting. It is not persisted and expires within a minute.

Contact

Questions? Email tech.codewallah@gmail.com.