Skip to main content
QR + Barcode Toolbox
Trust & LegalEffective Date: October 2026

Privacy Policy

We believe utility tools should respect user privacy by default. All QR code generation, barcode compilation, camera scanning, and image decoding happen directly on your device.

1. Our Core Principle: Data Minimization

At QR + Barcode Toolbox, our architectural philosophy is straightforward: the safest way to protect your data is never to collect it in the first place.

Unlike legacy web generators that route your data through remote backends or generate tracking redirects, our tool operates as a pure client-side application. Every byte of text, Wi-Fi password, contact detail, barcode payload, and camera video frame is processed strictly in your local browser memory (RAM) and never transmitted to our servers.

2. How Our Tools Process Your Data

A. QR Code Generation

When you generate a QR code for a website URL, Wi-Fi network, vCard contact, SMS, or plain text, the matrix geometry is rendered locally using open-source, standards-compliant JavaScript engines (such as qrcode). The payload string is converted directly into SVG paths or Canvas pixels on your computer or phone. No network requests are made during generation.

B. Barcode Generation

When you generate 1D or 2D barcodes (including Code 128, EAN-13, UPC-A, ITF-14, and Data Matrix), the bar widths, check digits, and quiet zones are calculated on your machine using bwip-js. No barcode payload or numeric identifier is ever sent across the internet.

C. Camera & Image Scanning

When you scan a code using your webcam or phone camera, video frames are decoded frame-by-frame directly inside your web browser via @zxing/library. Similarly, when you drop or upload an image file, the image is read into a local HTML Canvas element. Neither video frames nor uploaded images are ever uploaded, recorded, or saved to any remote server.

3. Device Permissions & Hardware Access

  • Camera Access: We only request camera access when you explicitly click the “Use Camera” or “Scan with Camera” button. Camera streams are strictly confined to your browser session and are terminated immediately when you switch modes or leave the page. Hardware access is additionally governed by modern Permissions-Policy HTTP headers.
  • Clipboard Access: When you click “Paste Image” or “Copy Code”, we request standard browser clipboard permissions only to execute your explicit action. We never inspect or monitor background clipboard data.
  • File System Access: Downloaded SVG and PNG files are synthesized locally as standard Blob URLs. We never require access to your file system beyond the standard browser download prompt.

4. Cookies, Advertising & Third-Party Services

We do not use tracking cookies, cross-site identity graphs, or fingerprinting technologies.

Google AdSense & Advertising: To keep this utility free, we display advertisements provided by Google AdSense. Google and third-party advertising vendors may use cookies to serve ads based on a user’s prior visits to this website or other websites on the internet.

Users in the European Economic Area (EEA), United Kingdom (UK), and Switzerland are provided with a Google-certified Consent Management Platform (CMP) dialog upon their first visit, allowing them to choose personalized or non-personalized ad experiences in full compliance with GDPR requirements.

You may opt out of personalized advertising at any time by visiting Google Ads Settings or aboutads.info.

5. GDPR & CCPA / CPRA Compliance

Because we do not collect, store, sell, or share personal information (such as your name, email, address, or payload content), there is no personal database to inspect or delete. However, under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA), you retain the full right to inquire about our data practices at any time.

6. Contacting Us

If you have any questions, suggestions, or concerns regarding this Privacy Policy or our local data processing architecture, please contact us directly at:

Our Non-Negotiable Trust Standards

  • •100% In-Browser: Encoding and decoding run locally on your device.
  • •Zero Server Storage: Payload data and images are never uploaded or logged.
  • •Permanent Static QR: No tracking proxies, URL shorteners, or expiring links.
  • •Truthful Standards: Generating a barcode does not issue a GS1 retail license.