Privacy Policy

Last Updated: 2025-11-11

Our Privacy Commitment

QR Toaster is built with privacy as the foundation. We believe your data is yours alone. This privacy policy explains how we handle (or rather, don't handle) your information.

The Short Version

  • No servers involved - All QR code generation happens entirely in your browser
  • No data collection - We don't collect, store, or transmit your data anywhere
  • No tracking - No analytics, no cookies, no fingerprinting
  • Open source - All code is publicly available on GitHub

Data Processing

Client-Side Only

When you use QR Toaster to generate QR codes:

  1. All processing happens in your browser - Your text, URLs, WiFi credentials, contact information, event details, and authentication codes are processed entirely on your device using JavaScript
  2. Nothing is sent to our servers - We don't have servers that receive or process your QR code data
  3. No third-party services - We don't use external APIs or services that could access your data

Local Storage

To improve your experience, QR Toaster may store some data locally in your browser:

What We Store:

  • Non-sensitive form inputs - For convenience, some generators may save your input (like event titles or contact names) in your browser's local storage so you don't have to re-enter them on your next visit
  • Appearance preferences - Color choices, styling options, and other customization settings

What We NEVER Store:

  • WiFi passwords - Never saved to local storage
  • OTP/2FA secret keys - Never saved to local storage
  • Any data you mark as sensitive

You're in Control:

  • All locally stored data stays on your device
  • You can clear this data anytime using your browser's settings
  • Clearing your browser's local storage will remove all saved preferences

Third-Party Code

QR Toaster uses the following open-source JavaScript libraries to generate QR codes:

  • qrcode-svg - Lightweight SVG QR code generation (License)
  • qr-code-styling - Advanced QR code styling with customization options (License)

These libraries run entirely in your browser and do not communicate with external servers.

Cookies and Tracking

  • No cookies - QR Toaster does not use cookies
  • No analytics - We don't track page views, clicks, or user behavior
  • No advertising trackers - No third-party advertising or tracking scripts
  • No fingerprinting - We don't attempt to identify or track individual users

Hosted Version

The public version of QR Toaster is hosted on GitHub Pages:

  • GitHub may collect standard server logs (IP addresses, access times) as part of their hosting infrastructure
  • We do not have access to these logs
  • See GitHub's Privacy Statement for their practices

Self-Hosting

You're welcome to download and host QR Toaster yourself:

  • Clone the repository from GitHub
  • Build and deploy to your own server or use it entirely offline
  • No connection to our servers is required once you've downloaded the code

Your Rights and Control

Since we don't collect or store your data:

  • No data to delete - There's nothing for us to delete
  • No data to export - All data stays on your device
  • No data to correct - You control all data directly in your browser

To clear locally stored preferences:

  • Use your browser's developer tools to clear local storage for this site
  • Or clear your browser's cache and site data

Changes to Privacy Policy

If we make changes to this privacy policy:

  • We'll update the "Last Updated" date at the top
  • Significant changes will be noted in the project's changelog
  • The policy is version-controlled on GitHub so you can see the full history

Open Source

QR Toaster is open source (MIT License). You can:

  • Review all code on GitHub
  • Verify that we do what we say
  • Contribute improvements
  • Report issues or concerns

Questions or Concerns

If you have questions about this privacy policy or QR Toaster's privacy practices:

  • Open an issue on GitHub
  • Review the source code to verify our privacy claims

Summary

We can't access your data because we never receive it in the first place. Everything happens on your device. That's privacy by design.