Account, privacy and trust

Privacy and your data

1 min read·Updated October 27, 2026

Short answer

Scans, short links and landing pages set no cookies and store no IP addresses. Locations come from the network at about city level, and visitors are recognised only within a day. Unactivated drafts are deleted after 7 days.

What we count

  • Scans and visits: time, kind, rough place (city level), device, browser and language.
  • A daily pseudonym to count unique visitors, which can’t follow anyone across days.
  • No cookies on scans, short links or landing pages.

How long we keep things

  • Unactivated codes: 7 days (30 for the Canva app).
  • Free codes and links: a year, then paused, then deleted 30 days later.
  • Leads: 12 months. Invoices: 8 years.

Our own website asks before analytics only where the law requires it (the EU, UK and Switzerland). Cookie settings in the footer changes your choice. Read the full privacy policy.

Related articles

How scans are countedA camera scan is a phone opening your code; a link open is someone tapping the short link in a chat or page. Both count. Link previews, bots, data centres and your own tests before activation don’t. No cookies, no stored IP addresses.
Sign in and manage your accountSign in with Google or an emailed 6-digit code: there are no passwords. Your profile is in Settings. Delete account removes your codes, pages, links, analytics and keys for good.
How AriaQR keeps codes safeEvery link is checked against Google Safe Browsing when it’s made, when it changes and every day after. Every code has a public check page anyone can open, people can report a code, and brands can verify their domain.

Search all guides

Still stuck?Write to us and a person replies, usually the same day.Contact us