qrtuner
Privacy
There are no accounts, no advertising and no tracking on qrtuner. This page says exactly what the service keeps and for how long.
Your painting
You paint in your browser. Each stroke is sent to the server so it can work out the code, and the answer comes straight back. The server does not keep your painting or the finished code.
What the service stores
- For a key: its credits, the date it was made, and the links it has unlocked.
- For a Build or Corporate plan: the domain and the date the plan ends. For a Corporate plan, also its API key.
- For the plan limits: a count of distinct links per domain, stored as hashes, per month or per day.
- For a free test code made from 18 October 2026: the destination link and the day the code was made, filed under the short id the code carries, so that a scan can be forwarded. The entry is deleted a day after the 14-day trial ends. Nothing else is stored with it: no address, browser or person. Test codes made before that date carry their destination inside the code and nothing is stored for them.
Codes made through the Corporate API count in the same daily link record as the page; the request itself and the images it returns are not kept. No names, email addresses, IP addresses or browser details are stored by the service.
AI assistants
An AI assistant connected to qrtuner can check a link, start a design, read one and ask for a preview on your behalf. Those requests are answered without accounts and nothing from them is kept, including the country you state to the assistant, which is used only to apply the country rule. They reach the web server from the assistant provider's address, not yours, and appear in its logs like any other request.
Payment
Stripe takes payment and holds your card details, email address and billing country. The service receives the purchase from Stripe so it can issue the key or plan, and your billing country decides whether GST applies. Your key is on the Stripe receipt, and a Corporate plan's API key is in the subscription's description, so it appears on Stripe's invoices. We do not send marketing email.
Scanning a code
An unlocked code carries your link directly. Scanning it goes straight to that link and never touches our server. A free test code opens through qrtuner.com first, so a scan of a test code reaches our web server like any page visit. A test code made from 18 October 2026 carries only a short id; the server looks the destination up in the list above and forwards. Older test codes carry the destination itself and keep working as before.
Web server logs
The web server in front of the service keeps standard access logs (the visitor's address, time, the page requested and the browser) for about two weeks, then deletes them. They are used for security, fault-finding and the daily visit summary below. A scan of a test code made from 18 October 2026 leaves only the code's short id in the log; while the test link's entry exists (the trial plus a day) that id can be matched to its destination on our own server, and after that it means nothing. A scan of an older test code, whose address includes its destination, leaves that destination in the log for the same two weeks. The service also holds each visitor's address in memory for about a minute to limit the rate of requests; that is never written to disk. To apply the country rule in the terms, the service looks each visitor's address up in a country table held on our own server (DB-IP's free database); no outside request is made and nothing is stored.
Visit summary
To see how people find qrtuner, a daily summary of visits is kept on our own equipment, without addresses: the time, the page (for a free test code only the code's short id and the destination's site name, never the full link), the referring site, the browser type, and whether the country rule applied. Nothing in it identifies a visitor or links one visit to another, and it is never shared.
Your browser
The page keeps your key in your browser's local storage so you do not have to type it again on that device. There are no tracking cookies. The page itself makes no requests outside qrtuner.com. The one exception is the Text and Icon panels: opening either loads fonts and icons from Google Fonts, so Google sees your address at that point, the way it does for any site using its fonts.
Questions
Write to support@qrtuner.com.