Privacy

Your data, your control

QR Studio runs on a simple principle: collect the minimum needed to make the product work, and nothing else. No ads, no tracking, no selling.

Our promises

No advertisingWe do not show ads and never embed third-party ad scripts.

No behavioral trackingNo fingerprinting, no cross-site tracking, no analytics pixels.

No data salesWe never sell, rent, or trade your information.

No reading your contentWe do not analyze the URLs, text, or contact info inside your QR codes.

What we store, and why

QR Studio is designed so each signed-in user gets a private vault for their dynamic QR codes. To make that work, the following data is stored on our servers:

QR codes you explicitly save

Title, type, design choices, and destination URL — so you can edit later and short links keep working. Nothing is saved if you only generate and download a static QR without signing in.

Your email address

Used only for passwordless sign-in (a 6-digit code) and billing receipts. No newsletters, no marketing emails.

Aggregate scan counts for dynamic QRs

When someone scans your dynamic short link, we log: timestamp, country, city, device type, referrer, and a salted SHA-256 hash of the scanner IP. The hash is one-way — we cannot recover the original IP. This powers the analytics in your dashboard.

Session tokens (hashed)

Only a SHA-256 hash of your session token is stored — never the token itself. Sessions auto-expire after 30 days.

Retention

OTP verification codes10 minutes
Sign-in sessions30 days, refreshed on use
QR codes in trash30 days, then permanently purged
Aggregated scan statsKept while the QR exists
Account & saved QRsKept until you delete them

Sub-processors

A small number of vetted third parties operate the service:

Cloudflare — hosting, DNS, DDoS protection, and the D1 database
Resend — transactional email for OTP codes and receipts
Polar — payment processing for Premium subscriptions

That is the entire list. No analytics vendors, no ad networks, no data brokers.

Your rights

View every QR code and scan stat tied to your account from the dashboard.
Delete any QR at any time — it goes to trash for 30 days, then is permanently purged. You can also delete immediately.
Request full account deletion by emailing support@service.vuvuive.org.
Export your data on request — same email.

Last updated: 2026-05-26