What happens to what you type
- Your browser downloads this site: pages, scripts, fonts and photos. That's the only network traffic, and it contains nothing you've typed.
- As you type, scripts on the page build the QR code text, draw the sign and lay out the PDF, all in memory on your device.
- The scan check turns the finished sign into an image and decodes it in a background thread in your browser, using a QR reader bundled with this site.
- When you download, the file is created on your device and saved by your browser. File names never include your network name.
There is no account, no server code, no database and no upload anywhere in the process. Your details are never put in a link, so they can't end up in browser history, server logs or analytics.
The security policy that enforces it
Every page is sent with a Content Security Policy, a browser-enforced rule about what the page may load and where it may send data. Ours allows connections only to this site (connect-src 'self'), loads scripts only from this site, and allows no third-party anything. Even a bug couldn't post your password elsewhere: the browser would block it. Here is the full policy:
default-src 'self';
script-src 'self' 'wasm-unsafe-eval';
style-src 'self' 'unsafe-inline';
img-src 'self' data: blob:;
font-src 'self';
connect-src 'self';
media-src 'self' blob:;
worker-src 'self' blob:;
manifest-src 'self';
object-src 'none';
base-uri 'none';
form-action 'none';
frame-ancestors 'none';
upgrade-insecure-requestsYou can see it yourself in your browser's developer tools (Network tab, select the page, Response headers).
Check it yourself
- Open the generator and let the page finish loading.
- Turn off Wi-Fi or switch on airplane mode.
- Type your details, pick a design and download the PDF. It all still works, because nothing needs the internet.
Remember on this device
“Remember on this device” is off unless you turn it on. When it's on, your details are saved in this browser's local storage so they're filled in next time. They stay on this device and are never sent anywhere. “Clear details and forget them” deletes them. Anyone who uses this browser could see them, so don't turn it on for a shared or public computer.
Scanning a code
The scanner reads images you choose and, if you allow it, your camera. Images and camera frames are decoded on your device and are never uploaded or stored. The camera turns off when you stop scanning or leave the page.
Analytics and cookies
The site sets no cookies and runs no analytics, ads or session recording today. If we add privacy-friendly visit counting later, it will never include anything you type, the contents of your codes, or your downloads, and we'll update this page first.
Cloudflare, which hosts the site, processes standard request information (such as IP address and browser type) to deliver pages and protect against abuse. That information never includes your Wi-Fi details, because they're never sent.
Links to other sites
Some pages link to Custom QR Code Generator, our sister site for menu, review and link codes, and to official help pages from Apple, Google and Samsung. Following a link takes you to that site under its own privacy policy. Nothing you've typed here goes with you.
What a QR code can't keep private
We protect your details while you make the sign. Once printed, the code is readable by anyone who scans or photographs it. That's how Wi-Fi codes work, everywhere, which is why we suggest a guest network for any sign in a public place.
Contact
This site is run by Variable Ratio. Read more on the about page.