Privacy Policy

QRPress QR Code Generator ("we", "our", or "us") is a free online QR code generation service developed and operated by Insyra Labs, accessible at https://qrcodegenerator.qrpress.in as part of the broader QRPress ecosystem (https://qrpress.in). This Privacy Policy explains how we collect, use, store, process, protect, and delete personal data across the QR generator service.

1. Scope of This Policy

This policy applies to all individuals interacting with the QRPress QR Code Generator:

• Users of Static QR Tools: Anyone who uses our free URL, WiFi, Text, vCard, UPI, or PDF QR generators. No account is required for these tools.
• Users of Dynamic QR: Users who sign up (name, email, password) to create, edit, and track dynamic QR codes from the dashboard.
• Website Visitors: Users who access our public pages, blog, and FAQ.

2. Information We Collect

• Dynamic QR Account Data: When you sign up for a dynamic QR account, we collect your name, email address, and a securely hashed password. When you create a dynamic QR code, the destination link and configuration you provide are stored so the code can keep working and be edited later.
• Static QR Data: Static QR codes (URL, text, WiFi credentials, vCard, and similar payloads) are generated entirely inside your browser. That payload is not uploaded to our servers and is not stored by us. Normal website telemetry (IP, user agent, page path, referrer) may still be collected as described under Technical Telemetry & Analytics below — QR payload data and site telemetry are different things.
• Technical Telemetry & Analytics: Client IP address (processed for rate-limiting, security, and visitor analytics), User-Agent, page path, and referrer are transmitted to our backend (api.qrpress.in) when you load public pages, and to Google Analytics and Microsoft Clarity.
• Local Storage: Auth tokens, preference flags, and visited-path markers are kept in your browser's localStorage to keep you signed in and prevent duplicate tracking.

3. Information We Do NOT Collect

• No account is required for static QR generation — you never have to provide personal details to create a static QR code.
• We do not scan, read, store, or analyse the contents of static QR payloads, because they never leave your browser.
• We do not collect payment card or banking credentials. Billing, where applicable, is handled by certified third-party payment providers.

4. Cookies, Advertising & Analytics

Analytics: We use Google Analytics (GA4) and Microsoft Clarity to understand how visitors use the site. These services place cookies and may collect device and behavioural data as described in their own privacy policies.

Advertising: Our site may display contextual or interest-based advertisements through Google AdSense. Google uses cookies to serve ads based on prior visits to this or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits. You can opt out of personalised advertising at any time by visiting Google Ad Settings or www.aboutads.info.

5. Third-Party Service Providers

• Vercel Inc. — Managed cloud hosting for this website.
• Cloudflare Inc. — CDN and R2 object storage for dynamic QR data and visitor telemetry.
• Google LLC — Google Analytics, Microsoft Clarity, Firebase for dynamic QR accounts, and Google AdSense advertising.
• Render / Railway — Managed cloud hosting for the QRPress backend API.

6. Data Security Safeguards

• All data transmitted to our services is encrypted with HTTPS/TLS in transit.
• Passwords for dynamic QR accounts are cryptographically hashed and salted before storage.
• API endpoints are protected by rate-limiting, CORS policies, and token-based authentication.

7. Data Retention

• Visitor logs: IP address, page path, and device data captured for analytics are retained for up to 15 days and then automatically deleted.
• Dynamic QR account data: Retained while your account remains active.
• Deleted accounts: Permanently purged within 48–72 hours of a deletion request.
• Static QR payloads: Never stored — they exist only in your browser session and download.

8. Account & Data Deletion

You can request permanent deletion of your dynamic QR account and associated data at any time by writing to hello@qrpress.in, or via the main QRPress account deletion page at qrpress.in/delete-account.

9. Children's Privacy

Our service is not directed toward children under 13. We do not knowingly collect personal data from children without verifiable parental consent. If we learn that a minor's data was collected without appropriate consent, we will promptly delete it.

10. International Data Transfers

Some third-party providers may process information in countries other than your country of residence. Where required, we apply appropriate contractual, organisational, and technical safeguards.

11. Grievance Redressal & Contact Officer

If you have questions, concerns, or wish to exercise your data rights, contact our designated Grievance Officer:

Statutory response commitment: all privacy inquiries will be acknowledged within 24 hours and formally addressed within 15 calendar days.