Privacy

Privacy Policy

What stkrd.com collects, why, and the choices you have. We keep only what’s needed to run stkrd, and we never sell your data.

Last updated: October 2026

Regular QR codes

Regular QR codes are made in your browser. Their content never reaches our server. We only count the type of code, the file format, your country and the site language, so we can understand how stkrd is used. None of this identifies you.

Tracked codes and short links

When you create one, we store your email address, the link it points to, how the code looks and when it was made. We use your email to send you your private stats link, change alerts and, if you keep them on, weekly reports.

To prevent abuse, we also keep a scrambled fingerprint of your connection for 2 days. It can’t be turned back into your IP address.

Scans and clicks

For each scan or click we record the time, country, type of device and phone language. We do not store IP addresses or build profiles. To count unique visitors we use a one-way code, and the secret behind it is deleted every month, so visitors can’t be identified or followed over time.

Change alerts

Whenever the link behind your tracked code changes, we email you right away with a one-click undo. Undoing a change also replaces your private stats link, so whoever made the change can’t do it again. We keep a history of changes for 12 months so you can see them on your stats page.

Link safety

New and edited links are checked with Google Web Risk to protect people from phishing and malware. Only the link is checked, never your email. Codes pointing to harmful links may be disabled.

Ads and cookies

stkrd is free because it shows ads from Google AdSense on the stkrd website. Ads never appear on your codes or before your link. Google may use cookies to show and measure ads, and in some regions we ask for your consent first. You can learn more and manage ad settings in Google’s ad policies.

Our own site uses only the cookies WordPress needs to work.

Who helps us run stkrd

Our hosting provider stores the site and its data. Our email service sends your stats links and alerts. Google provides ads and link safety checks. The DB-IP Lite database tells us which country a scan comes from, without sending your data anywhere.

How long we keep data

  • Tracked codes and their scan history: until you delete them
  • Scrambled connection fingerprint: 2 days
  • Change history: 12 months
  • Closed abuse reports: 6 months
  • Waitlist emails: until Pro launches, or until you ask us to remove yours
  • Contact messages: only as long as we need them to help you

Your choices and rights

  • Download your data: from any of your stats pages, download everything we hold about your codes as a CSV file.
  • Delete your data: from any of your stats pages, delete one code or all your codes, stats and your email address. This happens immediately and can’t be undone. Printed tracked codes stop working once deleted.
  • Lost your stats link? Use Find my codes and we’ll email you your links.
  • Weekly reports can be turned off at any time from your stats page.

You can also contact us to see, correct or delete your data. If you’re in the EU or UK, you have the right to complain to your data protection regulator.

Changes to this policy

We’ll post any updates on this page. Big changes will be emailed to owners of tracked codes.

Contact

Questions about your data? Write to us through our contact page.