Last updated: 6 October 2026 · QRWorks, operated by Codeworks
Your email address, display name, a hashed password (we never see the real one), and the QR codes and content you create. We use your email only for account matters: verification, password resets, and important service notices. No marketing lists, no selling data.
When someone scans a QR code we record an anonymous scan event for the code owner's statistics: timestamp, device type, operating system, browser family, country (approximate), and interface language. We do not store names, precise locations, or full IP addresses with scan events, and we set no tracking cookies on scan pages. Old scan events are automatically deleted after 365 days.
Pages load the DM Sans font from Google Fonts. If a code owner enables Google Analytics or a Meta pixel on their code, those services receive the scan visit under their own policies — this is the code owner's choice and responsibility. If bot protection is enabled, the sign-up form uses Cloudflare Turnstile.
Login attempts, sign-ups and abuse reports are rate-limited per connection; those counters keep a short-lived record of the requesting IP address. Abuse reports include the reporter's IP to prevent spam and are kept while the report is open.
You can delete your codes (and their statistics) at any time from your dashboard. To delete your whole account and its data, contact no-reply@codeworks.in.