Privacy, in plain words
This page is short because there is almost nothing to disclose.
What happens to what you type
Nothing leaves your device. The QR encoder, the batch processor, the print lab and every export run as JavaScript in your browser. Wi-Fi passwords, contact details, coordinates and CSV files are processed in memory on your machine and are never transmitted, logged or stored on any server. You can load this site once, go offline, and keep generating codes.
What we store in your browser
Two things, both under your control and both local: your theme preference (light/dark) and any codes you explicitly save with "Save locally". They live in your browser's localStorage, never sync anywhere, and disappear if you clear site data. "Export all" gives you a file copy first.
What we don't do
- No accounts, no sign-in, no email capture.
- No cookies.
- No analytics scripts, no tracking pixels, no fingerprinting.
- No third-party requests at all — check the network tab; it's empty after page load.
- The QR codes you make contain no watermark, identifier or callback to us.
Hosting
Static files are served by Hostinger (Hostinger International Ltd and HOSTINGER UAB, Vilnius), which, like any web server, processes standard connection data such as your IP address to deliver the page and to keep the service secure. The legal basis for that processing is our legitimate interest in running a working website (GDPR Art. 6(1)(f)); connection logs are kept by the host for its standard short retention period and are not analysed by us. Hostinger processes data under the GDPR and uses the European Commission's standard contractual clauses for any transfer outside the EEA (GDPR Art. 46(2)(c)). We add no logging or analysis on top of that.
Partner links
Three outbound links on this site are affiliate links, all to WP Engine: one in a note beside
the design controls in the studio, two on the pages about QR destinations. They are ordinary <a href> links, so the promise above
still holds exactly as written: no affiliate script, no pixel and no cookie is set here, and
nothing is requested from a partner until you choose to click. The commission is attributed
by the partner's own redirect after you have left, using a page tag
(subid=gq-studio, gq-destination or gq-destination-2) that identifies the page you clicked
from and nothing about you. What you typed into the generator does not travel with you,
because it never leaves your browser in the first place. The commercial terms are on the
terms page.
Controller, your rights, complaints
The controller for the little processing that happens is the operator identified on the imprint page, reachable directly at hello@plainforge.com. You have the rights the GDPR gives you (access, rectification, erasure, restriction, objection, portability); in practice we hold no data about you to act on, because nothing you type reaches us. You also have the right to complain to the Lithuanian supervisory authority, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).
If this changes
If we ever add measurement, it will be cookieless, aggregate, disclosed here first — and the generator itself will always work exactly as described above. GenerateQR is part of plainforge, a small studio of privacy-first tools; this promise is the whole brand.
Last reviewed: 5 September 2026 (evening: third link added).