Short version
QR Code Generator is a free in-browser QR code generator that turns any text or URL into a downloadable PNG. Whatever you type or paste into the tool stays entirely in your browser and is never sent to our servers. For analytics we use only privacy-friendly Cloudflare Web Analytics — cookieless, with no fingerprinting. We also display non-personalised ads (Google AdSense) by default.
Who we are
The data controller for this site is ThinkStack Limited, a company registered in Ireland (CRO number on file). Registered office: 51 Bracken Road, Sandyford, Dublin D18 CV48, Ireland. Contact: [email protected].
What we collect
Tool inputs
Nothing. The tool runs entirely in your browser. Your inputs are never transmitted to our servers and we have no server-side logging of tool inputs or outputs.
Google AdSense
We display ads through Google AdSense. Ads are served in
non-personalised (NPA) mode by default
(data-npa-on-unknown-consent="true"), which means Google
uses only contextual signals — not cross-site tracking cookies or
device fingerprints — to select ads until you grant consent.
See AdSense & user privacy
and Google's advertising practices.
Cloudflare
Cloudflare handles site delivery and edge caching. It processes IP addresses in transit and TLS metadata under its own privacy policy. We do not retain server logs ourselves. We use Cloudflare Web Analytics (cookieless, no fingerprinting) for aggregate request metrics — currently our only page-analytics tool.
Cookies and storage
This site sets no first-party cookies. When AdSense serves non-personalised ads (the default), it may set strictly necessary cookies for fraud prevention only; no personalisation cookies are set. Our only analytics, Cloudflare Web Analytics, is cookieless and does not fingerprint your device.
Some tool features (e.g. draft autosave) use localStorage
in your browser. This data never leaves your device.
Legal basis (GDPR)
- Tool operation — no personal data processed, so no legal basis required.
- Cloudflare operational data — legitimate interests (Art. 6(1)(f)) in operating a secure, performant website.
- AdSense non-personalised ads — legitimate interests (Art. 6(1)(f)) for contextual advertising; personalised ads require consent (Art. 6(1)(a)).
Your rights
Under the GDPR and Irish data-protection law you have the right to access, rectification, erasure, restriction, portability, and objection regarding personal data we hold about you. Because the tool itself processes no personal data, there is very little personal data involved at all. AdSense can be opted out via adssettings.google.com.
To exercise any right or to lodge a complaint, contact [email protected]. You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC), our lead supervisory authority.
Children
This site is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us and we will delete it.
Changes
Material changes to this policy will update the "last updated" date at the top of this page. The change will also be reflected in the site's git history.
Contact
Questions, requests, or complaints: [email protected].