Privacy
Updated on 19 October 2026.
Data controller: Timéo Gavaland (Tmog Studio), 45 rue André Bourcois Macé, 35160 Montfort-sur-Meu, France, bonjour@qrdurable.com. We collect as little data as possible.
The free generator
The content of your free codes (link, text, Wi-Fi password…) is processed in your browser: it is not sent to our servers and we never see it.
People who scan an editable code
When someone scans an editable code, our server adds 1 to that day’s counter and to “device type” (phone, computer, tablet) and “system” (iOS, Android…) counters, worked out from the browser’s technical header, then redirects them or shows the page. We record no IP address, no identifier, no location, no cookie: only totals. Daily counters are kept for 400 days.
“Customer feedback” pages
If you leave feedback on a “Customer feedback” page, we store your rating and comment (no name, no IP address). They are passed on to the code owner and erased after one year. Do not write personal information in the comment.
Buyers
- Data: email, password (stored with irreversible hashing, scrypt), codes (content, name, design, uploaded logo), uploaded files (PDF, images), orders (amount, date), scan counters and feedback received.
- Why: to provide the service you bought (performance of a contract) and to keep accounts (legal obligation).
- How long: as long as your account exists. You can delete it at any time from your account: your codes, files and data are then erased. A file no longer used by any code is erased after 3 days. Payment records are kept for 10 years by Stripe for our accounting obligations. Unpaid orders are erased after 3 days.
The “My QR code stopped working” tool
The photo is read in your browser and is not uploaded. If the code contains a link, our server visits that link to follow its redirects and show you the result. The link is not stored.
Link monitoring
Once a day, our server visits the destination address of editable codes that lead to a website, to warn their owner if it stops responding.
Audience measurement
To know how busy the site is, each page draws a random temporary identifier, kept only in memory while the page is open, and reports it to our server every 25 seconds. The server works out the number of visitors online (forgotten after one minute) and a total of page views per day. We also count free code downloads, without their content. No cookie, no IP address stored, no tracking across pages or days.
The contact form
Your email, your name (optional) and your message are sent to us by email, via Resend, so we can reply. They are not stored on the site. Exchanges are kept in our mailbox while we handle your request, and for 3 years at most.
Cookies
A single cookie, “qrd”, keeps you signed in to your account. It is strictly necessary, which is why no banner asks for your consent. No ads, no trackers, no fonts or scripts loaded from another site.
Service providers
- Railway: hosting of the website and data, servers in the Netherlands (US company).
- Stripe: payments and receipts (Ireland and USA).
- Resend: confirmation and password emails (USA).
- Google Web Risk: checks destinations against phishing and malware. Only the destination address is sent.
Transfers outside the European Union rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.
Artificial intelligence
None of your data is processed by an artificial intelligence system, and no automated decision is made about you.
Your rights
You can access, correct, erase or export your data (“Download all my data” button in your account), object to or restrict processing, by emailing bonjour@qrdurable.com. We answer within one month. You may also contact the French data protection authority, the CNIL (cnil.fr).