Privacy

Last updated November 13, 2026

myqr.sh is a free QR code service run by Outside The Box. This page explains what we collect and why.

If you have an account

Your name, email address and a securely hashed password.
The QR codes you create: destinations, short links, names, notes, tags, designs and any logo you upload.
A session cookie that keeps you signed in. We don't use advertising or tracking cookies.

When someone scans a code or opens a short link

To give code owners their analytics, we record each visit with:

The time, and whether it came from a QR scan or a link click.
Approximate location (country, region and city), derived from the network address by our hosting provider.
Device type, browser and operating system, from the browser's user agent.
The referring website, if the browser sends one.

We don't store IP addresses. To avoid counting the same person twice, we keep a one-way hash of the network address and browser for one hour, then delete it. Automated traffic such as link-preview bots is not recorded.

Who can see it

Visit data is visible only to the owner of the code, and to anyone they choose to share a public analytics page with. We don't sell data or share it with advertisers.

Where it's stored

The app runs on Vercel and stores data with Convex, both in the United States.

Deleting your data