Privacy policy

Last updated October 13, 2026. QR MAGIC is run from the United Kingdom at qrmagic.co.uk.

Without an account

Static QR codes, business cards and wallpapers are made in your browser. What you type into them is not sent to or stored on our servers. Your business card draft and wallpaper settings are saved only in your own browser (local storage) so you can come back to them; clearing your browser data removes them.

With an account

• Your email address and, if you give it, your name.
• Your password, stored only as a one-way hash (bcrypt). We cannot see it.
• The QR codes you save: their name, type, content, design and, for dynamic codes, the link they point to.
• The language you signed up in and how you found us (for example Google, a campaign link or our app), recorded once at sign-up.

We use this only to run your account. We do not sell it or share it for marketing.

When someone scans a dynamic QR code

To show the code's owner their scan statistics, we record the time of the scan, the device type, operating system and browser, the approximate country and city, and the referring page. The IP address is not stored: we keep only a salted one-way hash of it, used to count unique scans.

Cookies

We use one essential cookie to keep you logged in and one to remember your language. There are no advertising or tracking cookies.

Where data is kept

The site is hosted by Vercel and the database by Neon, who process data on our behalf. Data is kept while your account exists. Password reset emails are sent through Resend. Payments are handled by Stripe; we never see or store your card details.

Your rights and deleting your data

You can delete your account and all its data at any time. See how to delete your account. Under UK GDPR you can also ask for a copy of your data or for it to be corrected, by emailing the address below.

Contact

Email privacy@qrmagic.co.uk.