Privacy Policy

Who runs this site

QR Code Generator is an independent project operated by John Makridis (makridis.dev), who is the controller of the data described here. You can reach the operator through makridis.dev.

Using the generator without an account

Static QR codes (link, text, email, phone, SMS, Wi-Fi, location) are created entirely in your browser. What you type is not sent to our server and nothing is stored.

What we collect when you have an account

• Account data: your name, email address and a one-way hash of your password (we never store the password itself).
• Content you create: your QR codes, their names, designs and content, including everything you enter on a hosted page (names, phone numbers, addresses, links, descriptions) and the images you upload.
• Scan statistics for your dynamic codes and pages: the time of each scan and the visitor’s device type, operating system and browser. We do not store IP addresses, locations or any identifier of the visitor in these statistics.
• Password-reset requests: a hash of the reset token, kept for at most one hour.

Public pages

A hosted page (contact card, business, coupon, gallery…) is public: anyone with its link or QR code can see everything you put on it. Do not publish information you do not want to share. If a page embeds a YouTube or Vimeo video, the visitor’s browser loads that video from the provider, which may process data under its own policy (YouTube is loaded in its privacy-enhanced mode).

Cookies and local storage

We do not use cookies, analytics, advertising or tracking tools. Your browser’s local storage keeps your sign-in session, your language and your light/dark choice, so the site works as you left it. Like any web server, ours keeps short-lived technical access logs (which can include IP addresses) for security and troubleshooting.

Why we process it (legal basis)

• To provide the service you asked for — creating, hosting and counting scans of your codes (performance of a contract).
• To keep the service secure and prevent abuse (legitimate interest).

Who else handles the data

The site runs on a server operated by the controller, with files stored in S3-compatible object storage run by the controller. Password-reset emails are sent through an email delivery provider and only contain the reset link. We do not sell your data and do not share it with anyone else, except where the law requires it.

How long we keep it

Until you delete it. Deleting a code removes its content, its statistics and its uploaded images; deleting your account removes your profile, all your codes, statistics and uploaded files. Copies may remain in backups for a limited time.

Your rights

Under the GDPR you have the right to access, correct, delete and receive a copy of your data, and to object to or restrict its processing. You can edit your content and delete your account yourself at any time (My account → Delete account); for anything else contact the operator through makridis.dev. You may also complain to the Hellenic Data Protection Authority (dpa.gr).

Changes

If this policy changes in a way that matters, the effective date above changes and, where appropriate, we tell account holders.