Privacy Policy

You can create and download Static QR codes for free without an account. Your inputs are processed in your browser and are not sent to our server merely because you generate, preview, test, or download a QR code.

If you sign in and press “Save QR”, we store the QR name, generation payload, and visual style in your account. This is an explicit action you choose. A payload can contain sensitive information you entered, such as a WiFi password, phone number, contact details, coordinates, event details, or an identifier used to generate a PromptPay QR code. Save only information that you intend to store with this service.

In Phase 2A, a Free account can hold up to 25 saved Static QR codes at one time. The five-code Dynamic QR allowance is planned for a later phase and is not active. There is currently no Dynamic redirect or scan-event collection from that feature.

Sign-in is optional. We request only basic identity access for your name, verified email address, and standard profile information so we can create and display your account. We do not request access to Gmail messages, Google Drive, contacts, or calendars.

When you sign in, we persist the user, session, and Google provider-account records needed for authentication, including provider identifiers and tokens supplied within the granted scope. The session cookie carries an opaque token, is unavailable to page scripts, and expires within 7 days. Signing out ends the current session; it does not delete your account or QR codes you previously saved.

The service is configured not to persist raw IP addresses in session records. Phase 2A does not collect scan events or analytics. If analytics is enabled in a later phase, raw IP addresses will not be stored and Free-plan raw scan events will have a maximum 30-day retention policy.

A saved QR code remains in your account until you delete it from the dashboard. Deleting it removes that record from the primary database under the current implementation. Self-service deletion of the entire account is not yet available; contact the service owner to request deletion of your account and associated data.

An off-host database backup and restore check is a release gate before database-backed operation. We have not yet published a fixed backup-retention period, so we do not claim that deleting a primary record immediately removes every backup copy. If backups are activated, the actual retention period and deletion process will be published before service use.

We do not sell personal information. Google processes data involved in sign-in. HostAtom is the current web-hosting and MariaDB provider, so it processes account, session, and QR data you choose to save on the infrastructure used to deliver Nexora QR. Each provider operates under its own policies.

You can delete saved QR codes from the dashboard, sign out, clear cookies, and revoke Nexora QR from your Google Account security settings. Revoking Google access does not automatically delete data stored by Nexora QR. For questions or requests to access, correct, or delete your account and data, contact the service owner through the Orenvis website at orenvis.com.