GDPR & CCPA Aligned · Privacy by Architecture
Privacy Policy
Last Updated: November 2026 · Effective Date: Immediate
1. Our Fundamental Commitment
GetQR (getqr.techhowl.site) was built out of frustration with predatory QR generators that track users, sell marketing data, and hostage-lock printed QR codes. We believe QR codes are fundamental digital infrastructure that should be fast, transparent, and private.
2. Static QR Generation (100% Client-Side)
When you generate a Static QR code (Website URL, Plain Text, WiFi, vCard, Email, WhatsApp):
- Zero server roundtrips: The matrix encoding and image rendering run 100% inside your web browser.
- Zero data persistence: Your WiFi passwords, vCard phone numbers, and URLs are never sent across the internet to our servers.
- Offline capability: Static generation works even if your network connection drops.
3. Dynamic QR Analytics & Anonymization
When visitors scan a Dynamic QR code routed through getqr.techhowl.site/r/[code]:
- Raw IP addresses are never stored: We instantly compute a one-way cryptographic HMAC-SHA256 hash using a daily rotating secret salt (
HMAC(ip + userAgent, salt_day)). The raw IP is permanently discarded in volatile memory. - No tracking cookies: Scan metrics are first-party and cookie-free, eliminating invasive cross-site profiling.
- Bot filtering: Automated scrapers, spiders, and preview crawlers are isolated and excluded from dashboard metrics.
4. Data Retention Schedule
Individual scan events are retained for 13 months, after which they are rolled up into daily aggregate tables and raw records are purged.
5. Contact & Privacy Requests
For GDPR data export, deletion, or questions, please email privacy@getqr.techhowl.site.