Privacy Policy

This policy explains what information QRCodeBarn handles, why it is used, and the choices and rights available to visitors.

Last updated: 13 October 2026

Who we are and how to contact us

QRCodeBarn is run by The AI Barn, a small London studio building free web tools since 2021. For the personal information described in this policy, The AI Barn is the controller: it decides why and how that information is used. Contact us at hello@theaibarn.com or write to The AI Barn, 124 City Road, London, EC1V 2NX, United Kingdom. The existing privacy contact reference is Henry at The Aibarn; the email address above is the contact route for privacy matters.

Information the QR generator does not collect

QRCodeBarn creates QR codes in the visitor's browser using JavaScript. Text, URLs, WiFi passwords and uploaded logo images entered into the generator are processed locally by the browser to render a code or printable design; they are not sent to or stored on our server by that generator. The browser may fetch code libraries from jsDelivr, and the page may request site components, but we found no upload of the generator's entered content in the site's generator scripts.

Because we do not retain those entries, we cannot retrieve an earlier code or recover an unsaved image. Avoid sharing a generated QR image or destination if it contains information you do not want others to see. The code itself may be readable by anyone who obtains a copy.

Other information that may be handled

• Analytics: if you consent to analytics storage, Google Analytics 4 may receive information about visits and use, such as pages viewed, browser or device details, approximate location and interaction events. Our measurement ID is G-D5QWJQH4FE. We set Google Analytics data retention to the shortest standard period available.
• Advertising: if you consent to advertising storage, Google advertising services may use identifiers and information about visits to select, deliver and measure advertising. Our publisher identifier is ca-pub-2378599294878032.
• Server and security logs: HostGator, our web host, may keep operational logs such as an IP address, browser user-agent, requested URL and timestamp for security, troubleshooting and service operation.
• Messages to us: if you email us, we receive the address and any information you choose to include so that we can understand and respond to your message.

Cookies, consent and lawful bases

Essential storage supports security and core site operation. Analytics, advertising and personalisation storage are non-essential and default to denied until a visitor makes a choice. Our consent controls provide Accept all, Reject non-essential and preference-management options; the current banner uses “Cookie preferences” to open the controls, where choices can be saved. A Cookie Settings link in the footer lets you change your choice later. The selected state is stored in browser localStorage under qrbarn_consent_v1. Read the Cookie Policy for examples and instructions.

Under UK data protection law, our basis for analytics and advertising cookies or similar technologies is your consent, including the relevant consent required under privacy and electronic communications rules. We rely on legitimate interests to maintain site security, diagnose service problems and handle correspondence you initiate, while balancing those interests against your rights. Where a legal obligation applies, we may process information to comply with it. You can withdraw cookie consent at any time through Cookie Settings; withdrawing consent does not make earlier processing unlawful.

Service providers and other organisations

HostGator provides hosting and may process technical logs to deliver and protect the website. Google provides Google Analytics and advertising services, which operate according to Google's own terms and privacy information. jsDelivr and CDNJS distribute JavaScript libraries used by some pages and may receive ordinary connection information when your browser requests those files. A CDN request is not a transfer of the text or password entered into the QR generator. Providers may use other suppliers to operate their services. We do not control how an external service handles data once it receives it.

Google and other third-party vendors use cookies to serve ads based on a user's prior visits to this site and other websites. Google's use of advertising cookies enables Google and its partners to serve ads based on visits to this site and/or other sites on the internet. You can opt out of personalised advertising through Google Ads Settings and www.aboutads.info. For Google's explanation, see How Google uses information from sites or apps that use our services. These controls are separate from QRCodeBarn's consent settings.

International transfers

Some service providers or their systems may process information outside the United Kingdom. Where personal information is transferred internationally, applicable data protection rules require a lawful transfer mechanism and suitable safeguards, such as an adequacy regulation or approved contractual safeguards where relevant. The provider's own notices explain current processing locations and arrangements. You may contact us for further information about a transfer relevant to your request.

How long information is kept

We do not receive or store QR payloads through the generator. Technical logs are kept by the hosting provider for the period needed for security and operational purposes under its arrangements. We keep email correspondence for as long as needed to respond and then delete it within a reasonable period, unless it is necessary to retain it for a continuing matter or legal requirement. Analytics retention follows the setting described above; advertising identifiers are managed by the relevant provider and browser controls.

Your rights and complaints

Subject to the conditions in UK GDPR, you may ask for access to personal information, rectification, erasure, restriction of processing, object to processing or request portability. Where processing is based on consent, you may withdraw that consent. These rights are not absolute in every situation, and some information may be exempt or need to be retained for a legal reason. To make a request, email hello@theaibarn.com and state what you are asking us to do.

You can also complain to the Information Commissioner's Office at ico.org.uk. We would welcome the chance to address a concern first, but this does not affect your right to contact the ICO.

Children and policy changes

QRCodeBarn is a general-purpose website, not designed specifically for children. Do not provide a child's personal information in an email or encode it in a QR code unless you have authority and a clear reason to do so. If you believe a child has sent us personal information unnecessarily, contact us so that we can review and remove it where appropriate.

We may revise this policy when the site, its suppliers or applicable requirements change. The latest version will appear here with an updated date. Other relevant terms are in our Terms and Conditions, and questions may be sent through Contact QRCodeBarn.