QR Code Privacy: What Scan Data Is Collected
Learn what information QR-Codes.com processes during a dynamic QR Code scan, what QR Code owners can see, and how scanners can protect their privacy.
QR Codes make it easy to move from a printed object to a digital destination. When the code is dynamic, a redirect service can also measure scan activity. That makes it important to distinguish technical scan data from information a person chooses to submit after reaching the destination.
What happens when someone scans a dynamic QR Code?
The scan first reaches a QR-Codes.com redirect URL, which sends the person to the destination selected by the QR Code owner. That redirect is what allows the owner to update the destination and view scan analytics.
To operate the redirect and analytics service, QR-Codes.com may process the QR Code scanned, date and time, device and operating-system information, Internet Protocol address, approximate location, and data used to estimate unique scans and prevent abuse.
Approximate location may be derived from an Internet Protocol address or network information. If a feature requests more precise location, the scanner must first grant permission through the browser or device. Location is not always exact and can be affected by network routing, virtual private networks, device settings, and browser permissions.
Does a scan reveal the person's identity?
A standard scan does not require a person to provide a name, email address, phone number, postal address, or other direct identifier. QR Code owners receive scan analytics, not a list of scanner names or contact details.
Technical information such as an Internet Protocol address, device identifier, or location may still be treated as personal data under privacy laws. That is why our Privacy Policy describes how scan data is used, disclosed, retained, and protected.
What if the destination asks for personal information?
A QR Code may lead to a contact form, sign-up page, store, survey, social network, or another website. If a person chooses to enter contact, payment, or other personal information there, that is a separate interaction with the destination operator. Review the destination's privacy notice before submitting information.
Tips for people scanning QR Codes
Preview the destination address before opening it
Be cautious if a destination unexpectedly asks for passwords, payment details, or sensitive information
Review browser or device permission prompts before allowing more precise location
Look for HTTPS and signs that the destination belongs to the organization you expect
Close the page and contact the organization if a QR Code appears altered or suspicious
Tips for businesses using QR Codes
Tell your audience what the code does
Link to a clear privacy notice when the destination collects personal data
Collect only the information needed for the stated purpose
Protect destination accounts with strong, unique passwords and multifactor authentication when available
Regularly review QR Code destinations and campaign access
For details about QR-Codes.com's practices, read our Privacy Policy at https://www.qr-codes.com/privacy-policy.