Privacy Policy
Last updated: 20 July 2026
ZipiQR (“we,” “us”) is a free QR code generator, reader, and encrypted sharing tool. Here, in plain language, is what happens to your data. The short version: nothing you type into the generator and nothing you scan with the reader is ever sent to us, and when you share something, it’s encrypted on your device so we can’t read it.
What you type and what you scan stay on your device
When you create a QR code or scan one, everything happens on your device. Nothing you type, and nothing you scan, is ever sent to us — we receive none of it and store none of it.
Encrypted sharing — we can’t read what you share
When you share text or an image through ZipiQR, it’s encrypted on your device before anything is uploaded. We only ever receive scrambled bytes we cannot open. The key that decrypts your share lives inside the link itself — in the part after the #, which your browser never sends to any server. So even we cannot read your shared content.
Your encrypted share is stored only briefly — at most ten minutes — and is deleted the moment it’s read (burn-after-read), or when it expires, whichever comes first. We keep no copy and cannot recover it afterward. For images, location and camera details (EXIF, including GPS) are removed on your device before the image is ever uploaded.
What we necessarily see
We can’t read what you share, but — like any website — we briefly see that a transfer happened. When your device contacts our server to store or fetch an encrypted share, we process standard request information: your IP address, the time, the approximate size, and your browser’s user-agent. Your IP address is used only to rate-limit abuse and is not stored alongside your encrypted share. We don’t use any of this to build a profile of you.
Analytics
On our marketing and QR-generator pages only — never on the sharing, scanning, or receiving pages — we use Vercel Web Analytics to understand how people find and use the site. It is cookieless, collects only aggregated, anonymized information (such as page views, referring site, country, and device type), uses no persistent identifier, and does not track you across other websites.
Cookies
ZipiQR uses no tracking cookies. The site works without accounts and stores nothing in your browser to identify you.
Who processes data for us
- Vercel — hosting, content delivery, and the analytics described above.
- Upstash — the brief, encrypted storage for shared content. They only ever hold the same unreadable ciphertext we do.
Both only ever handle encrypted bytes and standard request metadata — never anything readable.
Data retention
Encrypted shares: at most ten minutes, and deleted on first read. Analytics: aggregated and retained by our analytics provider, and contains nothing that identifies you. We keep no other personal data.
Children
ZipiQR is not directed to children under 13, and we do not knowingly collect information from them.
Your choices
Because we hold no readable content and run no accounts, there is very little personal data to access or delete. If you have any questions about your data, please contact us.
Changes
We may update this policy; the date above reflects the latest version.
Contact
Questions? Email contact@zipiqr.com.