Q
QRLifetime
Codes never expire
Log in
EN DE FR ES

Privacy Policy

Last updated: 14 October 2026

1. Who we are

QRLifetime ("we", "our", "us") is operated by MCS (SIREN 106 942 600, R.C.S. Nantes), a French company. Contact: privacy@qrlifetime.com

2. What we do not collect

QRLifetime is designed to respect your privacy by default:

  • No account required. You never provide your name, email, or any personal data to use the free QR code generator. The exceptions are optional: the Pro waitlist (section 5) and a paid account or Lifetime Code (section 6).
  • No cookies for visitors. We do not set any cookies — not for analytics, not for advertising. The only cookie is a strictly necessary session cookie, set when you log in to an account (section 6).
  • No server-side QR generation. All QR codes are generated entirely in your browser using JavaScript. The content you enter (URLs, WiFi passwords, contact details) is never transmitted to our servers.
  • No personal data in QR codes. When you create a vCard QR code, that data stays in your browser and is encoded into the image file you download. We never see it.

3. Analytics (Umami)

We use Umami, a privacy-first, open-source analytics tool, to understand aggregate traffic patterns (page views, popular features, browser types). Umami is configured in cookieless mode — it does not use cookies, does not track visitors of this site across sessions, does not collect IP addresses, and does not share data with third parties. The analytics data is aggregated and anonymous.

This means no cookie banner is required under the GDPR and ePrivacy Directive, as no personal data is processed and no cookies are set.

Signed-in pages of the app. On app.qrlifetime.com, once you are logged in, Umami links your visits across days with a pseudonymous identifier: a code derived from your account by a one-way keyed hash, computed on our server. Umami never receives your email address, your name or your account number, only this code and your plan (Free, Pro, Business). It lets us see whether accounts keep using the product from one week to the next. Legal basis: our legitimate interest in improving the service (GDPR art. 6(1)(f)).

Which channel brought you. To understand which channels bring customers, the site keeps, for the duration of your browser session only (in your browser's sessionStorage, not a cookie, erased when you close the tab): the category of the site that sent you here (for example "google", "chatgpt" or "direct", never the full address), the page you first landed on, and the type of the last QR code you generated (URL, WiFi, vCard…). Nothing leaves your browser unless you follow a link to app.qrlifetime.com (log in, sign up, buy): these values are then passed to the app and, if you create an account, stored on it (section 6). Legal basis: our legitimate interest in measuring our acquisition channels (GDPR art. 6(1)(f)).

4. Hosting and infrastructure

QRLifetime is hosted on Cloudflare Pages (Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare processes HTTP requests to serve our pages. Cloudflare's privacy policy applies to this processing: cloudflare.com/privacypolicy.

Cloudflare may log IP addresses in standard HTTP access logs for security and abuse prevention purposes.

5. Contact emails and the Pro waitlist

If you contact us by email (e.g. to report abuse), we will use your email address only to respond to your message. We do not add you to any mailing list or share your email with third parties.

If you choose to join the Pro waitlist, we store your email address, the feature or plan you asked about, your interface language, the page you signed up from, your country (derived by Cloudflare from the request, not your IP address itself) and the date. We use it for one purpose only: to tell you when that feature launches, with the early-access discount. Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time. The data is stored in Cloudflare Workers KV, is never sold or shared, and is deleted at the latest 12 months after you sign up, or immediately on request at privacy@qrlifetime.com.

6. Accounts, payments and scan statistics

Paid plans (Pro, Business) and Lifetime Codes are optional and run on app.qrlifetime.com.

  • Account data. If you create an account, we store your email address, a hashed password, your plan and the QR codes you create (their destinations and settings), plus your team members if you use Business. We also store on the account how it came to us (the referrer category, landing page, language and QR type described in section 3, and the sign-up date) and a few usage dates (first editable code, first scan, first edit after a scan, last day of activity), to understand which channels bring customers and whether the product is actually used. Lifetime Code buyers without an account: we store the email address given at checkout and a hashed private edit link. This data is stored by MCS on Cloudflare D1 (Cloudflare's database service). Logging in sets one strictly necessary session cookie on qrlifetime.com, used only to keep you signed in. Legal basis: performance of the contract (GDPR art. 6(1)(b)).
  • Payments. Payments are processed by Stripe (Stripe Payments Europe Ltd.). We never see or store your card number; we receive from Stripe your customer and subscription identifiers, your billing details and invoices, which we keep as required by accounting law. Stripe's privacy policy: stripe.com/privacy.
  • Scan statistics. When someone scans an editable (dynamic) QR code, we record the date, the country, city and region (provided by Cloudflare), the device type, operating system and browser family, and the host name of the referring site. We do not store the IP address or the full user agent, so a scan cannot be traced back to a person. These statistics are shown only to the owner of the code. Legal basis: our legitimate interest and the code owner's in measuring the use of the code (GDPR art. 6(1)(f)).
  • Retention and deletion. Account data, codes and their statistics are kept for the lifetime of the account and deleted when you delete the account or ask us to at privacy@qrlifetime.com. Invoices are kept for the period required by law.

7. Your rights (GDPR)

If we hold personal data about you (waitlist, account, payments), you have the right to:

  • Request access to that data
  • Request correction or deletion
  • Lodge a complaint with your national data protection authority

To exercise these rights, contact us at privacy@qrlifetime.com.

8. Changes to this policy

We may update this policy if we add new features that change the data processing landscape. Any material changes will be noted at the top of this page with a new "Last updated" date.

9. Contact

Privacy inquiries: privacy@qrlifetime.com
General contact: hello@qrlifetime.com