Your code is drawn on your device

When you type a link, a Wi-Fi password or a contact, your browser turns it into a QR code right there. Nothing is sent to us or to anyone else. The page downloads the tool once, then does everything locally. Your logo, if you add one, stays on your device too.

Check it in five seconds: airplane mode

Open the site, then turn on airplane mode. Make a code and save it. It still works, because nothing needs to be sent anywhere.

Check it like a developer: the browser lock

Every page carries a strict Content Security Policy that includes connect-src 'none'. That tells your browser to block the page from sending data to any server, including ours. It isn’t a promise from us; your browser enforces it. You can see it in the page source.

Every script the tool runs comes from our own domain, with an integrity check.

The codes themselves

Codes made here are static: they hold your content itself, with no redirect through our servers. So we can’t see who scans them, and we can’t switch them off.

What stays on your device

Everything stays in your browser’s own storage, on this device, and is never sent anywhere. The site keeps three things there:

• Dark mode, if you turned it on.
• Your last design: colours and shape, never what’s in the code or its label. It’s there so your next code looks the same. Tap Forget it under the design to clear it.
• What you were making, for this tab only, so it’s still there if your phone closes the tab in the background. It goes when you close the tab. A Wi-Fi password is never kept.

What we do record

Like any website, our hosting provider’s servers log basic requests: which page was asked for, when, and the browser type. What you type is never in those logs, because it never leaves your device.

If you pick a language from the language menu, we set a cookie called lang. It holds the language you picked, so the homepage opens in that language next time. It expires after a year.