Last updated 5 August 2026
Cookie policy
We set exactly one cookie, and it's the one that keeps you signed in. Here's the full list, including the browser storage we use.
Strictly necessary
These make the site work. They don't need consent under the regulations, because without them you couldn't sign in at all.
| Name | Purpose | Expires |
|---|---|---|
qrgenrator_session | Keeps you signed in. Contains a random token — no personal data. httpOnly, so scripts can't read it. | 7 days, or 60 if you chose “keep me signed in” |
qrgenrator_oauth_state | Set only during Google sign-in, to protect against cross-site request forgery. Deleted the moment you land back. | 10 minutes |
Browser storage
Not cookies — these never leave your device and are never sent to us. They're listed because you deserve to know what's being kept.
| Key | Purpose |
|---|---|
qrgenrator.theme | Whether you picked light or dark mode. |
qrgenrator.palettes | Any colour themes you build yourself. |
qrgenrator.consent | Your choices on this page, and when you made them — so we don't ask again on every visit. |
Analytics
We don't run any. No Google Analytics, no tracking pixels, no third-party scripts of any kind. The consent banner offers an analytics category so that if we ever add something, your choice is already recorded and respected — not so we can quietly switch it on.
Changing your mind
Withdrawing consent is as easy as giving it — that's a legal requirement and a fair one.