Privacy, in concrete terms

Your content stays
in your browser.

Effective and last checked: October 29, 2026.

Generator and reader

Your QR payload, uploaded logo, CSV contents and scanned image are processed locally in your browser. Tidy QR does not upload them to a server. Camera frames are decoded on the device and are not recorded or transmitted by the application. Camera access stops when you stop the reader, leave the page or hide the tab.

The application does not store your QR content in a browser database or local storage. Exported files are saved through your browser's download function. Your browser may retain form values, downloaded files or cached website assets according to its own settings.

The light or dark interface preference is saved locally as a theme setting. It contains no QR content.

Smart paste and scan simulation

Pasted content is parsed locally without reading the system clipboard beyond your paste action. Simulated images, noise and decoding are created and processed locally. They are not uploaded or stored by Tidy QR.

Website delivery

The website, libraries and fonts are served from Tidy QR's own origin. There are no Google Fonts requests, third-party trackers or analytics scripts. The application sets no cookies. Loading any website still sends ordinary connection information, such as your IP address and request details, to its hosting infrastructure. Cloudflare serves this site and may process infrastructure and security logs under its own policies.

The QR reader does not fetch decoded links. Following a link yourself, including a source or mailto link, opens another service with its own privacy behavior. A QR code containing private information is readable by anyone who gets the image, even when it was created locally.

Optional Pro waitlist

Submitting the pricing form sends your email and consent to the site's Worker. The email is normalized to lowercase and stored in a Cloudflare KV entry with the creation time and source page. It is used for Tidy QR Pro availability updates, not sold or shared for unrelated marketing.

The Worker derives an hourly hashed rate key from your connection IP to limit repeated submissions. That rate record expires after an hour. KV rate limiting is a lightweight abuse safeguard and is not a security guarantee. Waitlist entries remain until you request removal or the list is retired. Request removal at contact@tidyqr.com.

Questions and changes

Contact contact@tidyqr.com with privacy questions. We will update this page when the product's data handling changes. A future product may require different processing, but its behavior will be described before you choose to use it.