Who is responsible?
The publisher identified in the legal notice is the controller for processing related to operating Qurl. This page covers qurl.be and its embedded tools.qurl.be tool in their current configuration.
- Publisher
- Publisher details
- Address
- Rue Demulder 39, 1400 Nivelles, Belgium
- Privacy contact
- hello@qurl.be
No account, name or email is required to create, read or download a QR code. The legal notice provides the publisher's full details.
What stays in your browser
Text, links, contact details, Wi-Fi access details, logos, images to read and print captions are processed locally. The generator creates and checks the QR code; the reader decodes your image. This content is neither sent to Qurl nor stored in a database or server history.
Drafts remain in the open page, including when you change QR type. The tool does not save them persistently in browser storage or add them to the page address. The main page exchanges only display information with the tool: theme, height and the position of the result to reveal, never your content.
- In the generator, Clear all resets inputs and personalisation, after confirmation when content is present.
- In the reader, Clear result removes the selected image and displayed result.
These commands are separate. Use them before leaving a shared device: restoring a tab or session also depends on your browser. Qurl does not control its autofill, extensions or backups.
Your files and links you open
Downloaded PNG, SVG and PDF files remain where you choose on your device. Retaining, sharing and deleting them is up to you, including synchronised copies or those sent to others. Clearing a form on Qurl does not delete these files.
A QR code contains readable information without encryption. Hiding a password on screen does not remove it from the QR image. Share only data you are authorised to share.
The reader does not automatically open the destination. If you open a link, scan a QR code leading to a website or use a contacts or messaging app, that service applies its own rules. Qurl does not count scans of your static QR codes or receive notifications of their use.
Your theme preference
Qurl initially follows your device's theme. If you choose light or dark mode, the site may store only “light” or “dark” under the key qurl-theme, in qurl.be's local storage. This choice restores your preferred appearance; it contains no tracking identifier or QR data.
The preference has no scheduled expiry. It remains until you delete it, clear site data or the browser removes it. The site's code does not send it to the server.
You can delete your theme preference and return to the device setting. Google choices, available separately on the Cookies page, are described below.
Connections to the hosting provider
Displaying a page requires connecting to Infomaniak, our hosting provider. It receives your IP address and requested resource, among other information. Technical logs may also contain the date, time, request result and browser-supplied information such as browser type or referring page.
This data is used to deliver pages, diagnose errors and protect the site. Infomaniak also provides hosting statistics, such as pages viewed and visit volumes. These are separate from an Analytics script loaded in your browser and do not measure scans of your QR codes.
The tool's fields and images are not sent in these requests. Nevertheless, avoid adding private data to web addresses or their parameters yourself: a requested URL may appear in a log.
When you write to us
The contact form asks for your email and message; your name is optional. Your acceptance of the privacy policy accompanies the message. This data helps us understand your request, reply and follow its resolution. Without a reply address or sufficient description, we may be unable to help.
When submitted, your message passes through Forminit, formerly Getform, which stores it and sends a notification to hello@qurl.be. This provider also receives your IP address, browser technical information, date and originating domain; it may infer approximate location from the IP address and uses antispam checks. The site sends it neither advertising parameters, the full page address nor QR content. No Forminit connection occurs when opening the page or typing.
You can also use your email app directly. The hello@qurl.be mailbox is hosted by Infomaniak, without forwarding to a CRM or support tool. Emails may contain attachments you choose and technical routing data. The form itself offers no attachments.
The form copy is subject to deletion after 30 days at Forminit. Email exchanges are deleted 12 months after the request closes, unless a legal obligation or dispute justifies retaining necessary information. Use a fictional example to report a problem, without passwords or confidential QR codes.
Why is this data processed?
For data processed in operating the site, the GDPR legal bases are:
- Site and security
- Our legitimate interest in making the service available, preventing abuse, resolving incidents and understanding its general operation through hosting statistics.
- Voluntary messages
- Our legitimate interest in responding to requests sent to the publisher and correcting reported difficulties.
- Exercising rights
- Compliance with our legal obligations when you exercise your data rights.
These purposes concern data needed for operations and correspondence, without collecting your QR content or advertising profiling by Qurl. You may object to processing based on legitimate interests for reasons relating to your situation. Choosing a theme fulfils your display request; it authorises no advertising tracking.
For how long?
- Tool content
- In the page while you use it, without persistent saving by Qurl. Clear commands remove content from the interface; downloaded files remain under your control.
- Theme
- Until you delete it or the browser clears storage, without scheduled expiry.
- Google choices
- The announced retention periods for the manager's cookies appear on the Cookies page. You can reopen your choices at any time.
- Form
- 30 days after Forminit receives it, then deletion during scheduled cleanup. According to its retention documentation, encrypted backups expire within a further 35 days. This deletion does not remove notifications received by email.
- Emails
- 12 months after the request closes, unless retention is justified by a legal obligation or dispute. This rule does not mean all technical mailbox copies disappear instantly upon deletion.
- Logs and statistics
- According to Infomaniak's retention and rotation policies. Its documentation states at least seven days for access and error logs. The effective maximum on this hosting account and the retention period for statistics remain to be confirmed.
The provider's stated minimum is therefore not a promise of deletion after seven days. See the log retention documentation. We will complete this information once the effective periods are confirmed.
Providers and transfers
Data needed for operations is accessible to authorised people at the publisher and providers delivering their services. Qurl does not send them content kept only in the tool.
- Infomaniak Network SA hosts qurl.be, tools.qurl.be and hello@qurl.be in its Swiss data centres. Switzerland benefits from a European Commission adequacy decision. Its commitments appear in its data processing terms.
- Forminit (UXPLUS LTD, United Kingdom) processes form messages on our behalf. The provider states that submissions are stored on AWS in Ireland (European Union). It uses subprocessors for infrastructure and antispam protection. Its processor commitments and safeguards for transfers outside the UK/EU are described in its privacy policy ; its GDPR page lists subprocessors.
- Google provides the consent manager opened at your request. Its privacy rules identify responsible entities, data and uses. Processing may take place outside the European Economic Area, including in the United States. Google describes the applicable transfer frameworks, including adequacy decisions and standard contractual clauses.
Data may also be disclosed to a competent authority when legally required. Contact us if you need details about recipients or safeguards applicable to your request.
Advertising and Google choices
AdSense ads and Google Analytics are not enabled. You can still open Google's consent manager from Cookies and preferences : it loads only when you request it on that page.
Opening it establishes a connection with Google, which receives your IP address, browser information and the qurl.be domain, among other data. The service displays purposes and its current partner list, then records your choices. Qurl sends it no QR content. Managing your choices responds to your request and consent-related obligations; opening the panel does not mean accepting optional purposes.
You can refuse on the first screen, customise purposes and partners, and object to proposed processing based on legitimate interests. Return to the same page to change or withdraw consent without affecting earlier lawful processing. All tools remain available regardless of your choice.
The panel presents Google's proposed advertising purposes; accepting them currently loads neither ads nor Google Analytics on Qurl. The Cookies page explains the storage documented by this provider. Before serving ads, we will update this information and present the necessary choices to relevant visitors.
Exercising your rights
Under the conditions set by the GDPR, you may request access to your data, correction, erasure or restriction of processing. You may object to processing based on legitimate interests. Portability applies in particular to automated processing based on a contract or consent; it is not a right that applies indiscriminately to all data.
Write to hello@qurl.be for a request about your data, or to the postal address at the top of this page. Explain your request and provide details to locate the relevant exchange. Do not send an identity document unprompted: proportionate verification may be requested if there is reasonable doubt.
A response is normally provided within one month. A two-month extension may be necessary depending on the complexity or number of requests; you will be informed of the reasons within the first month. Exercising rights is normally free. Refusal or fees for a manifestly unfounded or excessive request must be justified. See the Belgian DPA's guidance on exercising rights.
Qurl does not hold your QR drafts or downloads: delete them on your device. The current service makes no automated decisions producing legal or similarly significant effects concerning you.
You may lodge a complaint with the Belgian Data Protection Authority, or the competent authority where you live or work, and seek a judicial remedy.
Security and updates
Pages are served over HTTPS. Local QR processing and tool isolation limit data received by the publisher. These measures do not replace protecting your device and the files you share.
The date at the top indicates the last revision. Changes to the service or its providers will lead to updates to the relevant information and, where required, a new consent choice before activation.