Privacy

PixieQR is a static tool. The content you encode stays in your browser and in the file you choose to download.

There is no account, no advertising script, and no user tracking of generated codes. Generating a code does not add the text, Wi-Fi password, or contact card to a PixieQR database.

The browser may keep its own history of pages you open. PixieQR does not copy tool contents into the page address or into local storage.

Downloaded images contain the data you encoded. Anyone who receives the file can decode it. That sharing is under your control.

Pages and static files are delivered through Cloudflare. Cloudflare handles IP addresses and other ordinary request metadata. The QR content you type is not included in those requests. Cloudflare's notice for end users is at https://www.cloudflare.com/privacypolicy/.

PixieQR keeps its own first-party count of page views on the server. It uses no cookies and no third-party analytics. IP addresses and full browser identifiers are not stored; visitors are counted with a random salt that changes every day and an irreversible hash. Raw records are deleted after 14 days; only daily totals are kept longer.

Optional Google Analytics 4 may be offered to understand basic site traffic under regional privacy controls: in regions requiring prior consent (EEA, UK, Switzerland, and conservative jurisdictions) or where visitor region is unknown, measurement only activates if you explicitly choose Allow in the footer settings. In other recognized regions, measurement is enabled by default with opt-out available at any time via the footer settings (remains off if storage is blocked). If you decline, or if your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, Google analytics remains completely inactive. When enabled, Google Analytics uses pseudonymous cookies (such as _ga, expiring in up to 180 days) and remembers your choice in localStorage for up to 180 days (or memory if storage is unavailable). Google receives standard connection metadata, including IP address, browser/device information, referrer origin, and sanitized page paths without tool data. Advertising, Google Signals, and ad personalization are disabled. Data may be processed on servers outside your country by Google and its affiliates. See Google's privacy policy at policies.google.com/privacy and partner site data usage at policies.google.com/technologies/partner-sites. If we enable analytics, we require user and event data retention to be limited to 2 months; aggregate reports may remain longer. You can withdraw consent or opt out at any time via footer settings, which stops collection and clears Google analytics cookies without affecting your browser.

If you write to contact@pixieqr.com, the message is received by the email routing service of Cloudflare, which passes it on to the mailbox our operators read, hosted by Google (Gmail), and also hands a copy to a small program we run on Cloudflare, which keeps it only until our own server has fetched it — normally within minutes and never longer than 14 days. Our server, hosted by Google Cloud in the United States, keeps your email address and name, the subject, the text of the message, the technical headers and the names and sizes of any attachments (not the attachments themselves) in our internal support list for up to 180 days and then deletes them. Cloudflare's delivery log records the sender and recipient addresses, the subject and the result of the delivery for about a month. We use your message only to answer you, keep it only as long as we need it and delete it when you ask us to.

Frequently asked questions

Do you read Wi-Fi passwords?

No. They stay on your device and are not sent with the request for this page.

Who can read a file I download?

Anyone you give the file to. Sharing the image shares the encoded content. Creating the code stays on your device.