QR generator privacy
Who we are
This tool is a free service from NexAi·Studio (nexaistudio.com), the controller of the data described here. Contact and legal notice: nexaistudio.com/contacte/ and nexaistudio.com/avis-legal/.
What we store
Without an account, only if you create a dynamic QR or short link: the destination address, a short code, the creation date and, for each scan, the day, the device type (mobile, desktop or tablet) and the country. With an account, also your email address, the date and version of your consent, whether you opted in to news (and when), the date of your last sign-in and your links. We do not store your IP. Static QR codes and text are generated in your browser and never reach us.
Why and legal basis
Redirects and stats: performing the service you ask for. Account and sign-in emails: your consent when you sign up (GDPR art. 6.1.a) and performing the service. News and offers by email: only if you tick the optional box, which is unticked by default; you can withdraw it on the account page or by writing to us. Abuse prevention: legitimate interest (art. 6.1.f).
Abuse prevention
To limit how many links are created and how many emails are sent, we use a temporary identifier derived from your IP with a secret key; it cannot be reversed and is deleted within days. To remember that you already used the free link without an account, the limit is tracked with a cookie and a network identifier that changes every month. If you share a network or cleared your cookies the limit may be inexact; signing up solves it.
Cookies and storage
We only use technical cookies: a session cookie (nq_s, 30 days) if you sign in, and an anti-abuse cookie (nq_f, 1 year) that only says you already created the free link without an account. We use no analytics or advertising cookies. Your browser also stores locally (localStorage) the list of your links and their management keys. You can clear all of it from your browser.
Third parties
Cloudflare serves the page, runs the redirect and hosts the database (D1, EU jurisdiction). Resend sends the sign-in emails. Google Fonts serves the typeface. Each processes data under its own policy and may involve international transfers with appropriate safeguards.
Retention
Links and stats are kept while they exist; you can delete them at any time. The account is kept until you delete it. Sign-in links expire after 15 minutes and sessions after 30 days.
Your rights
You can access, download and correct your data, delete your account and withdraw consent from the account page. For anything else or to complain, write to us through the form at nexaistudio.com/contacte/. You can also complain to your data protection authority (in Spain, aepd.es).
Link content
We do not control where user-created links point. You can report one from the notice page shown before going to the destination.