QR Code Toolkit · Effective: 28 September 2026
QR Code Toolkit is developed by OOTW Studios (OutOfThisWorld Studios), a sole-trader software studio based in Slovenia, EU, which is the data controller for the processing described here. Contact: contact@outofthisworld-studios.com
The free version of the app shows ads served by Google AdMob. AdMob may collect and use your device's advertising identifier to serve personalised ads, in accordance with Google's Privacy Policy.
On first launch you are shown a consent form (Google User Messaging Platform) where you choose whether ads may be personalised. If you decline, AdMob serves non-personalised ads instead. To change your choice later, clear the app's data (Android Settings → Apps → QR Code Toolkit → Storage → Clear data) and the form is shown again on the next launch. You can also reset or delete your advertising ID in your device's settings.
We do not receive or store any AdMob-attributed user data. Premium users see no ads.
When a scanned web link passes the app's offline safety check and contains no query string, fragment or login details, the app asks the Microlink preview service to fetch that page's title, description and image. Microlink receives the link and your device's IP address, and it requests the page itself, so the site's owner can see that the page was fetched. Links rated risky, and links that carry a query string, fragment or credentials, are never previewed. See the Microlink Privacy Policy.
The app offers an optional Premium upgrade. Payment is processed by the app store you installed the app from; we never see your card or bank details.
We use RevenueCat to validate purchases and unlock Premium. RevenueCat receives an anonymous app user ID, your purchase receipts and transaction details, and technical information such as platform, operating system and app version, and your IP address — not your name or email address. See the RevenueCat Privacy Policy. Purchase records are kept for as long as needed to honour your purchase and meet accounting obligations.
If you turn on Sync to Cloud in Settings and sign in with your Google account, your scan history — each scan's content, type and time, and any tags you add — is stored in Google Firebase (Cloud Firestore) under your account so it can be restored on your other devices. Firebase Authentication holds your Google account's name, email address and account ID for sign-in. Google's Firebase privacy terms apply to that hosting.
Deleting a scan, or clearing your history, while Cloud Sync is on also deletes it from the cloud. Signing out or uninstalling the app does not delete the cloud copy: clear your history first, or email us and we will delete it.
URL safety checks run entirely offline, using a ruleset bundled in the app. The check itself sends nothing to any server.
PDFs are generated on your device and shared through your operating system's share sheet. We do not receive copies of exported files.
The app is not directed at children under 13. We do not knowingly collect personal data from children.
Your scan history lives on your device, so you can erase it at any time with History → Delete All or by uninstalling the app. If you use Cloud Sync, clear your history while signed in to delete the cloud copy too. For AdMob data, use Google's privacy controls. For purchase data, contact us and we will pass your request on to RevenueCat.
You also have the right to access, correct and port your data, to object to its processing, and to lodge a complaint with a supervisory authority — in Slovenia, the Information Commissioner (ip-rs.si).
For any privacy enquiries, contact: contact@outofthisworld-studios.com
We will update this page when our practices change. The effective date at the top always reflects the latest revision.