Privacy policy

1. Data controller

The data controller is the publisher of the Website, a private individual acting in a non-professional capacity (see the legal notice). For any question about your data: .

This policy is written in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and the amended French Data Protection Act No. 78-17 of 6 January 1978.

2. Data entered in the generator

The QR code generator runs entirely in your browser, using a JavaScript program downloaded with the page. The information you enter (web address, text, phone number, Wi-Fi credentials, contact details…) and the images you import as a logo:

• are never transmitted to the publisher, the hosting provider or any third party;
• are not stored: they disappear as soon as you close or reload the page;
• are only used to display the preview and produce the file you download.

The publisher therefore does not process this data in any way. You can check this yourself: once the page has loaded, the generator works even without an internet connection.

3. Cookies and local storage

The Website sets no cookies.

If you click the theme switch (light/dark), your choice is saved in your browser’s local storage (key theme) so it can be applied on your next visits. This information stays on your device, is never transmitted and cannot identify you. As it is strictly necessary for a feature you explicitly requested, it does not require consent. You can delete it at any time by clearing your browser data.

4. Hosting provider’s technical logs

As with any website, when you visit the Website, the hosting provider’s server automatically records certain technical data in its access logs: IP address, date and time of the request, requested page, response code, browser type and referring page.

• Purposes: keeping the Website running and secure, preventing abuse and attacks, troubleshooting incidents.
• Legal basis: the publisher’s legitimate interest in securing the Website (Article 6(1)(f) GDPR) and the hosting provider’s legal obligations.
• Recipient: LWS (Ligne Web Services), hosting provider, acting as a processor. The publisher only looks at these logs when needed for technical or security reasons and never uses them for statistical or commercial purposes.
• Retention period: a limited period set by the hosting provider in accordance with its legal obligations.
• Location: the servers are located in France; no data is transferred outside the European Union.

5. Anonymous audience statistics

To know how many people use the Website and improve it, the publisher measures its audience with GoatCounter, a privacy-friendly analytics tool. What is counted: the pages viewed and the number of QR codes generated, never their content (link, text, Wi-Fi password…).

• Data sent with each measurement: the page address, the referring page, the screen size, the browser type and the IP address, used only to determine the country.
• No personal data kept: the IP address and browser details are not stored; only anonymous totals are kept (per page, per day, per country, per browser type). No cookies are set and there is no cross-site tracking.
• Legal basis: the publisher’s legitimate interest in knowing the Website’s audience in order to improve it (Article 6(1)(f) GDPR). As they are strictly anonymous and limited to this purpose, these statistics do not require consent.
• Recipient: GoatCounter, acting as a processor. The data is hosted in the European Union (Finland and Germany).
• How to object: common tracker-blocking extensions prevent this measurement; you can also block the goatcounter.com domain in your browser.

6. Resources and external services

All the Website’s resources (fonts, icons, scripts, including the statistics script) are hosted on the Website itself. The only external service contacted during your visit is the anonymous statistics tool described above: no Google Fonts, no CDN, no social media buttons, no advertising.

Some pages contain links to third-party websites (for example, Google’s documentation for finding a Place ID, or the Iris QR Facebook page in the footer). These are plain links: no button, script or tracker from these services is embedded in the Website. These websites are only contacted if you click the link, in which case their own privacy policy applies.

7. If you write to us

If you contact the publisher by email, your address and the content of your message are used only to reply to you (legal basis: legitimate interest in handling your request). They are kept for as long as needed to handle your request, then for no more than three years after the last exchange, and are never shared with third parties.

8. Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to set instructions regarding your data after your death.

To exercise these rights, write to . You will receive a reply within one month. Please note that since the publisher collects no identifying data, it may be unable to find you in the technical logs (Article 11 GDPR).

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr, or with the supervisory authority of your country of residence.

9. Security

The Website is served exclusively over HTTPS and applies strict security headers (Content Security Policy, HSTS) that, among other things, prevent external scripts from being loaded.

10. Changes

This policy may be updated, in particular if the Website or regulations change. The date of the last update is shown at the top of this page.