stillqr

Privacy

No account needed, no tracking cookies, no selling data. Here is exactly what StillQR keeps.

Last updated: September 23, 2026

If you create links

  • The destination URL, optional name, routing rules, settings and a history of past destinations.
  • A hash of the link's edit key. The key itself stays in your browser; we can't recover it.
  • QR codes that hold their own data (Wi-Fi, contact cards, text...) are made in your browser and saved only there. Their contents never reach our servers, and Wi-Fi passwords aren't stored anywhere.

If you sign in with Google

  • Signing in is optional. It's needed to use AI, to buy credits and to manage your links from any device.
  • We keep your Google account id, email and name, which links you manage, and your AI credit balance.
  • We set one cookie to keep you signed in. It only works on stillqr.com and is not used for tracking.
  • If you share a link with other accounts, everyone managing it sees the others' name and email.
  • You can delete your account anytime from the account menu. That deletes your credits and your links with their statistics; links you shared pass to someone who manages them with you.

If you open a StillQR link

For each visit we store only what the link owner's statistics need:

  • Time, whether it came from the QR code or the link, and the destination you were sent to.
  • Country (from Cloudflare), device type, operating system, browser, browser language and the referring site.
  • An anonymous visitor id: a hash of your IP address and browser with a random salt that changes every day and is then deleted. It only lets us count unique visitors per day; it can't be traced back to you.

We do not store IP addresses, set cookies on visitors, or build profiles across links or days.

If the link owner turned on advanced analytics, you pass through a split-second page whose script also reports your screen size, time zone, local hour, browser languages, dark mode and connection speed, plus the campaign tags in the link. The owner only sees totals, never a single visit. Nothing is stored on your device.

Services we use

  • Cloudflare delivers the site and runs the human check (Turnstile) when you create a link.
  • Google signs you in (if you choose to) and, through Web Risk, checks destination URLs for phishing and malware.
  • OpenRouter and the AI model provider it routes to receive your routing request, or the aggregated and anonymous statistics of a link, when you use an AI feature.
  • Polar sells Pro and credits as merchant of record and processes the payment. We never see your card.

How long we keep it

Link data and its statistics stay while the link exists; deleting a link deletes its data. Account data stays until you delete the account. Database backups are kept for 7 days.

Your rights

You can ask us to show, correct or delete your personal data, as Uruguay's personal data law (Law 18.331) and similar laws allow. Write to [email protected].

Questions

Write to [email protected]. To report an abusive link, use the report form.