Privacy
Effective 8 August 2026
We never see your contact details, with one exception you have to ask for.
Your contact details never reach our servers. They are encoded in your QR code and in the part of a link that browsers never send. There is no contact database, account or contact-card scan tracking—not because we promise, but because there is nowhere for those details to go.
The single exception is Add to Apple Wallet, described below. It is the only button in QR Studio that sends your card anywhere, and nothing else changed when we added it.
What stays on your device
The contact card you create is stored only in your browser on your device. QR images and contact files are generated there too. QR Studio does not upload, synchronise or back up that information.
What happens when someone opens a card link
The contact card is carried after the # in the link. Browsers do not send that part to the web host. The page decodes it on the recipient's device so they can read the card and save the contact.
What the web host can record
Our host records that someone loaded a page—an IP address and a timestamp, like any website. It cannot record whose card was opened or what was on it.
Add to Apple Wallet — the one exception
Apple requires a Wallet pass to be cryptographically signed with a certificate that Apple issues to us. That signing cannot happen in your browser, because it would mean publishing the private key to everyone. So if—and only if—you press Add to Apple Wallet, your card is sent to our server, signed, and sent straight back to you as a pass file.
If you make your own brand, its colours and resized PNG logo are saved only in this browser. When you press Add to Apple Wallet, they travel with the card in that same one-time request so they can be placed inside the signed pass.
That request is not stored and not logged. We do not keep the card, its brand, its logo, a copy, a hash or a record that you made a pass. Nothing from the request is written to disk at any point. If you never press that button, your card and brand are never transmitted at all, and every other part of QR Studio works exactly as it always has.
Once the pass is on your phone it belongs to you and Apple; we have no way to see it, update it or revoke it.
Location QRs are different
An offline location QR is plain text and never contacts our server. An actionable location QR sends its project, building, level, zone, label and requested action to the QR Studio resolver. The resolver logs the scan payload, time and browser information so project tools can record and act on the scan. Do not put personal or confidential information in a location label.
Reading someone else's QR
Read mode decodes in your browser, on your device — whether you drop in an image or point the camera at a code. Neither the image nor the camera frames nor what they contain is uploaded, and nothing about them is stored. This matters more than the rest of this page, because the codes you read usually belong to someone else, and their details are not ours to receive either.
Camera frames are examined one at a time and discarded immediately; nothing is recorded, kept or sent. The camera runs only while you have the scanner open, and stops the moment you leave Read mode, switch tabs, close the page, press Stop, or a code is read.
A QR can encode any address at all, and the code itself gives you no clue where. QR Studio therefore shows you the full address of any link it finds and never opens one for you.
No hidden readers
The card page has no analytics, advertising tags, remote fonts, widgets or third-party scripts that could read the contact details from the address bar.
Deletion and recovery
You can remove the saved card and custom brand using Erase everything QR Studio stored here, or by clearing the site's browser data. We cannot recover either because we never receive a copy. Keep a downloaded QR image if you need a durable backup.