Privacy & cookies
Short version: your QR code content never leaves your device. The only data involved is ordinary advertising and technical data from your visit to this website.
Last updated:
1. The QR codes you create
QRilo is built as a client-side application. When you type a website address, a Wi-Fi password, a phone number or an entire contact card into the generator, that information is processed by JavaScript running inside your own browser tab. It is used for one purpose: to compute the QR pattern you see on screen and to produce the file you download.
We do not transmit, receive, log, store or have any way of accessing that content. There is no API call, no form submission and no server-side rendering involved in generating a code. If you open your browser's developer tools and watch the network activity while you design and download a code, you will see no request carrying your payload. This is a property of how the tool is built, not merely a promise.
The practical consequence is worth stating plainly, because it matters more than the wording of any policy: your Wi-Fi password, your contact details and your payment addresses are never sent to us, so they cannot be leaked by us, subpoenaed from us, or sold by us.
2. Codes you save in the “Saved on this device” list
When you press Save for later, the code's details and a small preview image are
written to your browser's own localStorage under this site's origin. That data
stays on your device and inside your browser profile. It is never synchronised, uploaded or
backed up by us. Clearing your browser data, or using the delete button on a saved item,
removes it. Anyone with access to your device and browser profile could read it, so treat it
as you would any locally stored note.
Your theme preference (light or dark) and a compact share-link hash are stored the same way.
3. Technical data collected by simply visiting
Like almost every website, our hosting provider records standard technical information needed to serve pages reliably and to defend against abuse. This typically includes your IP address, the user agent string of your browser, the page requested, and a timestamp. These logs are short-lived, are not used to build a profile of you, and are not combined with your code content (which, as explained above, we never receive in the first place).
We do not operate an account system, so there is no login, no email list you are added to without asking, and no profile of your activity across our site tied to an identity.
4. Advertising and its cookies
QRilo is free to use, and it is funded by display advertising. That funding is what keeps every feature — including SVG and PDF exports — free, unlimited and free of watermarks. To show adverts, we work with advertising partners such as Google AdSense.
Advertising is on this website only — it never enters your codes
This is the part of our privacy position we consider most important, so it is stated without hedging: advertising exists on the QRilo website and nowhere else. It has no effect on any QR code you create here, and it never will. Your codes are always free and always ad-free.
Advertising cookies and advertising partners operate on these pages, between your browser and the advert network. They are not connected to the generator's output in any way. A code you download contains only the content you entered — no advert, no tracking pixel, no redirect, and no identifier that could be used to serve you anything later.
Because your content is encoded directly into the symbol and we operate no server in the middle
of your code, there is no technical point at which an advert could be inserted. This is a
limitation of the design, not a policy we could quietly reverse. A downloaded PNG, SVG, JPG or
PDF is a static pattern of squares: it cannot load a script, display an advert or report a scan.
You can confirm this yourself by opening an exported .svg in a text editor and
reading its contents.
One practical consequence: your advertising settings cannot change the generator in any respect. A code made while adverts are showing and a code made while they are blocked are identical — the same content, the same file, the same permanence.
Advertising partners may:
- set and read cookies or similar storage in your browser;
- collect your IP address, approximate location derived from it, device type and browser information;
- record which adverts were shown and interacted with;
- use that information to select adverts, including personalised adverts based on your interests.
These cookies and scripts belong to the advertising partner, not to us, and they operate only on the pages of this website. They are not connected to the generator's output in any way, and they have no effect on the codes you create.
Google's handling of data in its advertising products is described in the Google Privacy & Terms. You can also opt out of personalised advertising through Google Ads Settings.
5. What we store in your browser
The following items are stored by us, locally, and only for the stated purpose:
| Item | Purpose | Type | Duration |
|---|---|---|---|
qrilo.theme | Remembers light or dark mode | localStorage | Until you clear it |
qrilo.saved.v1 | Your saved codes and previews | localStorage | Until you delete them |
| Third-party advertising cookies | Advert delivery and measurement | Cookies | Set by the advertising partner |
You can clear all of the local items at any time from your browser's site-data settings. To control advertising cookies specifically, use your browser's cookie settings or Google's advertising controls linked above.
6. Third-party resources
The page loads the Inter web font from Google Fonts and Google's advertising script. Loading a font is a request to Google's servers and therefore discloses your IP address to them. The QR engine itself, the design and all site code are served from our own domain and are not fetched from any third party. Your QR code content is never passed to any of these services.
If a font request fails, the site degrades gracefully to your system font. It never blocks the generator.
7. Children
QRilo is a general-purpose utility and is not directed at children. We do not knowingly collect personal information from children, and because we do not collect user accounts or code content at all, there is nothing of that kind to delete on request.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete or restrict the processing of your personal data, and to object to personalised advertising. Because we operate no accounts and store no code content, most such requests relate to advertising data held by our advertising partners, and are best directed to them. Where a request concerns something we do control — for example a server access log tied to your IP address — we will respond within the period required by applicable law.
9. Changes to this notice
If this notice changes materially — for example if a new advertising partner or analytics service is introduced — the “last updated” date at the top of this page will change. Continued use of the site after an update means you accept the revised notice.
10. The one-paragraph version
Your QR content stays on your device and we never see it. Advertising cookies are the only tracking on this site, they are set only if you accept them, and you can browse and generate codes with them declined. Nothing about your codes is stored on our servers, because nothing about your codes ever reaches our servers.