No IP addresses stored · Never sold
What happens to data when someone scans
Scan analytics should tell you how your print performs, not who your customers are. Here is exactly what QR-10 records when someone scans a dynamic code, and what it never does.
The full legal details are in our privacy policy.
How it works
What happens during a scan
- 1
Someone scans the code
Their phone opens the code’s short link, such as qr-10.com/r/aB3dE7k. No app, account or sign-in is needed.
- 2
QR-10 records the scan
The time, the type of device and its settings, and an approximate location. The IP address is used for a moment and not stored.
- 3
They are forwarded
The visitor lands on the page the code’s owner chose, in a fraction of a second.
Our commitments
Built to measure print, not people
No IP addresses stored
Unique scans are counted with a one-way, keyed fingerprint of the IP address and browser, which can’t be turned back into an address.
Location looked up on our servers
Country, region and city come from an IP database on our own servers. IP addresses are never sent to a third-party location service.
No names or contacts
Scans never include names, phone numbers, email addresses, contacts or exact GPS positions.
Never sold, no ad profiles
Scan data is not sold and is not used to build advertising profiles.
Bots filtered out
Link previews and crawlers are recognised and kept out of the analytics, so numbers reflect people.
Private to the code’s owner
A code’s analytics are shown only to the account that created it, never to other users.
Clear retention
Scan history is kept while the code exists, and erased 30 days after the code is deleted, or immediately when the account is deleted.
Export anytime
Code owners can download their scan data as CSV whenever they like.
Approximate, not exact
Location is the city level estimate an IP database gives, never a street or a GPS position.
What is recorded with each scan
For each scan of a dynamic code, QR-10 stores the date and time, the type of device (phone, tablet or desktop), the operating system and browser or scanner app, the language the phone is set to, and an approximate location: country, region and city.
During the scan, the visitor’s IP address is used to estimate that location and to filter out bots and abuse. It is not stored with the scan. To count unique scans, we keep only a one-way, keyed fingerprint of the IP address together with the browser’s user agent.
How location works
Approximate location is looked up on our own servers from an IP geolocation database (IP Geolocation by DB-IP, licensed under CC BY 4.0). The IP address is not sent to any outside location service. Results are at city level and can be wrong, especially for mobile networks, which often route traffic through another city.
Static codes record nothing
Static QR codes, such as the ones from our free generators, contain their content directly and never pass through QR-10 when scanned, so no scan data exists for them at all. The free generators also run entirely in your browser: what you type to create a static code is not uploaded.
If you scanned a code and have a question
The business or person who displayed a QR code decides how it is used. If you scanned a QR-10 code and have a privacy request, contact the organisation that displayed it; we will help them respond. You can also write to us at contact@qr-10.com.
At a glance
What a scan does and doesn’t record
| What happens to it | |
|---|---|
| Time of the scan | Stored |
| Device, operating system, browser, language | Stored |
| Country, region and city | Estimated on our servers, then stored |
| IP address | Used during the scan, not stored |
| Names, phone numbers, emails, contacts | Never collected |
| Exact GPS position | Never collected |
FAQ
Scan privacy questions
No. Owners see anonymous totals and breakdowns: when, roughly where, and on which kinds of devices. Never names, phone numbers or exact positions.
No. The IP address is used during the scan to estimate location and filter bots, then discarded. Only a one-way fingerprint is kept to count unique scans.
No. Location is looked up from a database on QR-10’s own servers, so the IP address never leaves them for that purpose.
For as long as the QR code exists in its owner’s account. It is erased 30 days after the code is deleted, or immediately when the account is deleted.
No. Static codes open their content directly without passing through QR-10, so there is nothing to record.
Measure your print, respect your customers.
Start free with 3 dynamic codes and full, privacy-respecting scan analytics.
Scan me — I’m real