Privacy

Effective date: August 18, 2026 · Operated by Ghost Harbor LLC

What this site does with the content you enter

Nothing. The QR generator and the decoder run entirely in your browser as JavaScript served from this domain. Content you type, images you upload as logos, and images you decode are processed on your device and are not transmitted to this site or to anyone else. There is no backend service, no form submission, no analytics script, and no error-reporting service in the page.

You can check this rather than trust it:

1. Open your browser's developer tools and switch to the Network tab.
2. Type content and generate a code. No network request appears.
3. Turn off your network connection entirely and generate another code — the tool keeps working.
4. Inspect this page's response headers: the Content-Security-Policy header prevents the page from connecting to any other origin.

Saved settings on your device

If you leave "Save my style settings on this device" switched on, your style choices (colors, dot shapes, error correction, margin) are stored in your browser's localStorage. This data never leaves your device, contains no entered content, and can be deleted at any time with the "Clear saved settings" button or the controls on the Cookies & site data page.

Hosting

This site is served through Cloudflare's edge network. Like any web host, Cloudflare's servers process connection metadata to deliver the page and defend against abuse: your IP address, user agent string, requested URL, timestamp, response status, and country. Ghost Harbor LLC views this data only in aggregate, through Cloudflare's server-side zone analytics, to monitor site health (traffic volume, error rates, bandwidth). No analytics code runs in your browser for this — the measurement happens on Cloudflare's servers as part of serving the request. See Cloudflare's privacy policy for how Cloudflare handles this data as a processor.

Network error reporting

Cloudflare serves this site with Network Error Logging (NEL) response headers. These ask your browser to report delivery failures — for example, a request that never reached Cloudflare's network — to Cloudflare's reporting endpoint at a.nel.cloudflare.com, so connectivity problems can be detected. To be precise about what this is and is not:

• The reports are generated and sent by your browser itself, not by any code on this page — this page's code makes no requests to anyone, which you can verify as described above.
• Cloudflare's policy for this site requests failure reports only; successful visits are not reported.
• A report describes the failed request: the URL that failed, the type of network error, and timing. It can never contain anything you typed into the tool, because that content exists only on your device and is not part of any request.
• Cloudflare processes these reports as part of operating its network, under the privacy policy linked above.

If you prefer that your browser send no such reports, blocking a.nel.cloudflare.com with a content blocker or DNS filter has no effect on this tool — it works fully with that endpoint unreachable, just as it works fully offline.

Legal basis (GDPR)

For visitors in the EEA and UK, the processing described above (serving the site and protecting it from abuse via connection metadata) rests on legitimate interest under Article 6(1)(f) GDPR: operating and securing a website that stores and profiles nothing about its visitors. No content you enter is processed by us at all, so no legal basis is needed for it — it never reaches us.

To exercise data protection rights or ask questions about this policy, email support@ghostharbor.gg. Note that because this site keeps no records of visitors, there is usually nothing for us to look up, correct, or delete.

Do Not Track and Global Privacy Control

This site does no tracking, so DNT and Global Privacy Control signals are honored by default — there is nothing to opt out of. (Statement provided for California CalOPPA compliance.)

Children

This site does not collect personal information from anyone, including children under 13. It has no accounts, no messaging, and no data entry that leaves the device, so no parental consent mechanism is required or applicable.

Changes

If this policy changes, the effective date above changes with it. Earlier versions are available on request from support@ghostharbor.gg.