Privacy Policy

What this service does

QRCodeForPDF takes a PDF you upload, stores it, and gives you a QR code that opens it. Anyone who scans that code reaches your document. Most of this policy is about the consequences of those two facts, because they matter more here than the usual boilerplate.

The documents you upload

Your PDF is stored so we can serve it when someone scans the code. It stays yours — uploading it gives us no rights over it beyond hosting and delivering it to whoever opens your code.

Your document is reachable by anyone holding the link. It is not listed anywhere, not shown in search results, and not indexed — the address contains a random slug that cannot be guessed — but there is no login between a scanner and your file, because a printed code has to work for a stranger with a phone. If a document should not be readable by whoever picks up the paper it is printed on, add a passphrase (Pro), or do not put it behind a public code.

When you replace the PDF behind a code, earlier versions are kept so you can roll back. Deleting the code deletes them too.

What we record when someone scans your code

For each scan we store:

• Country and city, as reported by our edge network.
• A device category — mobile, tablet or desktop. Not the browser's full user-agent string.
• A visitor hash, so a count of distinct scanners is possible.
• The time of the scan.

What we deliberately do not record

• We do not store the scanner's IP address. It is used to derive the visitor hash for that one request and then discarded — it is never written anywhere.
• We do not store raw user-agent strings, only the three-way device bucket.
• We cannot follow a scanner across days. The visitor hash is salted with a value that rotates every 24 hours, so the same phone hashes to something different tomorrow. This is also why unique-visitor figures are only ever reported per day; a lifetime figure would need a fixed salt, which is the tracking this design exists to avoid.
• We cannot correlate a scanner between two of your codes. The code's own id is mixed into the hash.
• We do not know who scanned your code, and neither will you. Scan data describes traffic, not people.

Your account

If you create an account we store your email address, your name if you give one, and a hash of your password — never the password itself. Codes you create while signed in are associated with your account.

You can use the service without an account. Anonymous codes are associated with no one.

Payment

If you subscribe, payment is handled by our payment processor. Card numbers go to them directly and never touch our servers. We store the subscription's status and the order record, so we know what you are entitled to.

Cookies and local storage

• A session cookie when you are signed in.
• A locale cookie remembering which language you were served.
• An unlock cookie, if you enter a passphrase for a protected document, so you are not asked again on every page of it.
• Your light/dark choice, in your browser's local storage. It never reaches us.

We do not run advertising trackers, and we never show adverts to people who scan your codes.

How long we keep things

• A code in an account is kept. That is the promise the product is built on: something printed on paper should not stop working.
• A code made without an account, and its document, are deleted two hours after it is made. Nothing about it is retained — not the file, not the row, not its scan records. Creating a free account within those two hours keeps the code instead. Codes made before 27 August 2026 predate this clock and are kept permanently, scanned or not.
• Scan history is visible for 90 days on the free plan and 365 days on Pro.
• Deleting a code deletes the document behind it, its earlier versions, and its scan records.

Sharing

We do not sell your data. We share it only with the infrastructure providers who run the service on our behalf — hosting, storage, payment, email — and only as far as each needs to do its job. We will disclose data if the law requires it.

Your rights

You can access, export, correct or delete your account and everything in it. Most of it is in your dashboard; for anything that is not, email us and a person will do it.

Changes

If this policy changes materially we will update the date above and say so in the service. Contact: hello@qrcodeforpdf.app.