Cookie notice

Effective 1 November 2026

A short notice, because there is little to say. The scan journey sets nothing at all.

The short versionScan pages and short links set no cookies and run no tracking scripts.The marketing site sets only a consent cookie until you accept analytics.No advertising cookies anywhere.Change your choice any time from “Cookie settings” at the foot of every page.

Scanning a code

Following a short link or a dynamic code sets no cookie and loads no script, including on the warning and notice pages a code can show. A business’s own hosted page may load its Google Analytics, and only after the visitor accepts it on that page; that is the business’s choice and its notice to give.

Our marketing site

Your choice: One first-party cookie, qrcg_consent, remembers whether you accepted analytics, for 182 days. It is necessary, so it needs no consent.
Google Analytics 4: Only if you accept. Counts visits with advertising features and Google signals off. Sets Google’s _ga cookies.
Microsoft Clarity: Only if you accept. Records clicks and scrolling, with everything you type and the code preview masked. Sets Microsoft’s cookies, including MUID.
Global Privacy Control: If your browser sends it, we treat it as “Reject” and load neither tool.

The dashboard

Once you sign in, we set what the application needs and nothing more.

Session: An HTTP-only session cookie that keeps you signed in, for up to 30 days. Cleared when you sign out or revoke the session.
Workspace: qrcg-workspace remembers the workspace you last used.
Invitation: qrcg-invite carries a team invitation through sign-up, for a short time.
Theme: Light or dark mode is kept in your browser’s local storage, not in a cookie.

Changing your mind

Use “Cookie settings” at the foot of any page. Withdrawing consent stops the tools and deletes their cookies. Your browser can also block or delete cookies; blocking the session cookie stops you signing in.

Cookie questionsIf you find a cookie on a scan page that is not described here, tell us — we treat that as a bug, not a policy question.privacy@qrcodegenerator.in

Who operates this service

Operator: Agochar Tech LLP, a limited liability partnership registered in India under the Limited Liability Partnership Act, 2008.
Registered office: 415 Decora Square, Sadhu Vasvani Road, Rajkot 360005, Gujarat, India
Grievance officer: Rajesh Dalsaniya, Grievance officer and CEO · grievance@qrcodegenerator.in · +91 86986 76976. Complaints are acknowledged within 24 hours and resolved within 15 days.
Governing law: Governed by the laws of India; the courts at Rajkot, Gujarat, India have jurisdiction, subject to your rights as a consumer.

This document is in force from 1 November 2026. If we change it, the new version and its date appear here, and account holders are told before a material change takes effect.

Regimes we operate under

Stated with current status rather than aspiration. Where something is not yet done, it says so.

Compliance regimes
Regime	What we do	Status
India — DPDP Act 2023 and Rules 2025	Privacy notice, named grievance officer, self-serve export and deletion, consent for analytics. Most of the Rules’ obligations take effect in 2027.	In progress
India — IT Rules 2021 and E-Commerce Rules 2020	Operator, address and grievance officer published; complaints acknowledged in 24 hours and resolved in 15 days.	In place
GDPR	No IP addresses stored, daily-rotating visitor hashes, processor terms for customers, export and deletion. No EU representative appointed yet.	In progress
CCPA / CPRA	We do not sell or share personal information, and say so here.	In place
GST — India	Tax invoices with GSTIN, HSN/SAC and place of supply; a credit note for every refund.	In place
NPCI	UPI payment links built to NPCI’s published format. Our standee templates are not certified by NPCI.	Not certified
PCI DSS	Card details go directly to Razorpay or PayPal and never reach our systems.	Out of scope
WCAG 2.2 AA	Automated checks on every change; our own conformance report is published.	Self-assessed
SOC 2 / ISO 27001	Not held.	Not held