Privacy

In short

• Your images are read on your device. They are never uploaded, by the site or by the extension.
• What a code says, links in it, the pages you visit and file names are never sent anywhere.
• We count a few anonymous events (for example "a scan found 2 codes") to learn what works. Where the law asks for it, we ask you first.

Images and codes

Decoding runs in your browser with a built-in engine (zxing-cpp compiled to WebAssembly). When you drop, paste or choose an image on this site, it stays in your browser tab. When you give the site an image link, your browser downloads that image directly from the site it is on, without your cookies.

The extension reads the tab you click it on: what is visible, and the images on the page. It does this only after your click, and only in that tab. If a site does not share its images, the extension can ask for permission for that one site; Chrome shows you the request, and you can remove the permission any time in Chrome's extension settings.

Links found in a code never open by themselves. Only web links (http and https) get an Open button, and the site address is shown in bold before you press it.

What we count

We use PostHog, hosted in the EU (Frankfurt), to count how the site and the extension are used. Events carry only numbers and fixed labels, for example how many codes a scan found, which formats (QR, EAN-13), how long it took, and whether it worked. They never carry the content of a code, a link, a site address, a page title, a file name or an image.

In the EU, EEA, UK and Switzerland we ask before we set anything on your device. If you decline, a few anonymous counts are still sent without any identifier stored on your device. Elsewhere the counting is on by default. Your IP address is not stored.

When you install the extension

Chrome opens a short page that shows how to pin the extension. It sends one anonymous count, "installed", with the extension's version number. No identifier is sent and nothing is stored on your device.

When you remove the extension

Chrome opens a short page asking why. If you answer, we receive the reasons you ticked, your optional comment (up to 500 characters) and the extension's version number. No identifier is sent and nothing is stored on your device. Please do not write personal data in the comment.

Who else is involved

• PostHog (EU cloud) receives the anonymous counts described above.
• Netlify hosts this website and keeps standard server logs for a short time.
• Fonts and the decoding engine are served from this site; nothing loads from other domains.

We do not sell or share data, and there are no ads.

Contact

Questions or requests: arto@qrfromimage.com. If this policy changes, the date at the top changes too.