Privacy Policy

QRinst ("QRinst", "we", "us") is a QR code generation and management tool. This policy explains what data we collect, why, and the choices you have. If you have questions, contact us at hello@mdxtora.com.

When you generate a static QR code (URL, Wi-Fi, vCard, WhatsApp, email, SMS, and similar types), the content you enter is encoded directly in your browser using Canvas/SVG rendering. It is never uploaded to our servers, never logged, and never stored by us.

Dynamic features (editable-destination codes, uploaded files, business cards, menus, and scan analytics) require a signed-in account and are stored on our servers (via Supabase) so we can serve redirects and show you scan/view statistics. This can include: the email address you sign in with, the destination URL or uploaded file you provide, labels/campaign tags you add, and aggregate scan/view counts with timestamps. If you send feedback through the Contact page, we store your message and the optional email you give us so we can read and reply to it. We do not sell this data.

Paid plans are processed by Paddle, our Merchant of Record. We do not store your card number. Paddle may collect billing details directly, subject to Paddle's own privacy policy.

Static QR generation does not set cookies. If you sign in to use dynamic features, we use a strictly-necessary session cookie/token to keep you signed in. If advertising is enabled on this site (see Section 6), Google and its partners may also set cookies or use similar technologies in your browser.

This site may show ads served by Google AdSense. Google, as a third-party vendor, uses cookies (such as the DoubleClick cookie) to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising by visiting aboutads.info/choices. Learn more about how Google uses data at policies.google.com/technologies/partner-sites.

If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, advertising cookies and personalized ads are only used after you give consent through Google's consent message (a Google-certified consent management platform). You can change or withdraw your choice at any time using the privacy settings option that message provides. Without consent, only non-personalized ads (or no ads) are shown.

We do not run advertising-style visitor-tracking analytics (e.g. Google Analytics) on this site. Scan/view counters for your own dynamic QR codes are first-party statistics tied to your account, used only to show you performance data.

Our hosting provider, Cloudflare, may collect aggregate, privacy-focused site analytics through Cloudflare Web Analytics (page views, referrers, country, browser and performance metrics). It does not use cookies or local storage for this and does not track you across sites or build advertising profiles. See Cloudflare Web Analytics.

Sign-in forms use Cloudflare Turnstile, a third-party service, to block automated abuse. Turnstile may process technical data such as your IP address and browser signals, subject to Cloudflare's privacy policy.

Some links on this site (for example to Printful or Namecheap) are affiliate links tracked through affiliate networks such as Impact. If you click one and make a purchase, we may earn a commission at no extra cost to you. The network and the merchant may set cookies once you leave our site, under their own privacy policies. Affiliate links are labelled as such.

QRinst is not directed at children under 13 (or the minimum age required in your region), and we do not knowingly collect personal information from them.

Depending on where you live, you may have rights to access, correct, export, or delete your data (e.g. under GDPR or CCPA/CPRA). To exercise these rights, email hello@mdxtora.com. Deleting your account removes your dynamic QR codes, uploaded files, and associated statistics.

We may update this policy from time to time. Material changes will update the "Last updated" date above.