Effective Date: September 2026
Common privacy notice
This tool-specific layer supplements the Sorola controller privacy notice, which identifies the controller and explains legal bases, common technical data, recipients, transfers, retention and your rights.
1. Introduction
Sorola QR Code Generator ("the Tool") is a free QR code creator committed to protecting user privacy. This privacy policy explains how the Tool handles data.
2. Data Collection and Usage
The Tool sends the QR content you provide to Sorola's /api/qr-proxy, which forwards it to api.qrserver.com to render the QR image. Sorola's application does not store QR content in its database or intentionally add it to application logs.
- Tool data: The tool does not send the content you process to analytics. Optional consent-gated site analytics are described below.
- Input content: QR content may itself be personal data. Do not enter passwords, credentials or unnecessary personal data.
- Retention: Sorola processes the content in transit and does not retain it in its database. The external image service processes the content and technical request data under its own terms.
3. Data Sharing and Third Parties
QR content is disclosed to api.qrserver.com to perform the requested function. Data is not sold. Other technical recipients and possible international transfers are described in the common notice.
4. Security
All communication with the QR generation endpoint is conducted via secure, encrypted HTTPS protocols. Do not enter sensitive information such as passwords into the QR generator.
5. Contact
If you have any questions regarding this privacy policy, you can contact us at: contact.make@sorola.fi
Optional site analytics
Sorola does not load Google Tag Manager or Plausible Analytics before you accept optional analytics. After acceptance, measurement may process the page URL, title and referrer, browser and device information, and form, outbound-link, and file-download event metadata. Identifier-free performance measurement additionally reports only the product, a coarse page class, rounded Core Web Vitals, and a count of at most ten errors; it does not report the path, user, processed content, or error details. Content you process in a tool is not intentionally added to analytics. Rejecting does not limit the service. The choice is stored in local browser storage and a first-party preference cookie for up to one year. You can change your choice at any time with the persistent “Privacy settings” button.