Privacy

Operator: [Operator name], [Jurisdiction]. Contact: abuse@oakqr.com.

Static codes

Generated entirely in your browser. What you encode, including logos, is never sent to us.

Dynamic codes

When dynamic codes are enabled, we store the destination URL, its edit history, creation and change times, and a hash of your manage token. Scans are counted per day with a country and a device class. We do not store scanner IP addresses or user agents.

Site analytics

We count page views and events (for example, that a code was downloaded) in aggregate, without cookies or identifiers. Vercel Web Analytics and Speed Insights measure visits and performance without cookies.

Abuse protection

To limit abuse we compare requests using a hash of your IP address combined with a salt that changes daily. The IP address itself is not stored, and the hashes cannot be linked across days. Cloudflare Turnstile protects dynamic code creation and the report form.

Reports

If you report a code, we store the code, your reason, any details you add and the optional contact you give, to review the report.

Your data on this device

The "My codes" list is kept in your browser's local storage and never uploaded.

Requests

To ask about or delete data tied to a dynamic code, write to the address above with the code's short link.