Terms for dynamic QR codes

Last updated October 30, 2026. These apply to codes made on q.qrotto.com.

What you may not use it for

• Phishing: pages that ask for passwords, bank, card or identity details under false pretenses.
• Scams, fake shops, fake payment or prize pages.
• Malware or files that harm a device.
• Pretending to be another company or person, including using their name or logo to mislead.
• Anything illegal where you or the person scanning lives.

We may turn off any code that breaks these rules, with or without notice. A code with several reports is paused until we check it.

What we store

• For each code: the link it points to, a secret edit key, the date it was made, and scan counts by country, device type and day.
• We do not store the IP address or any personal details of people who scan. To stop abuse we keep a one-way hash of the connection that made a code for one day, to count the 20 codes a day limit. When you send a report we keep a one-way hash of your connection with it, so one person cannot report the same code many times.
• When you turn a code off, its link and scan counts are deleted.

No guarantee

The service is free and given as it is. We work to keep codes running, but we cannot promise it will never be down or never end. That is why every edit page lets you download a plain QR code that does not depend on us. If we ever close the service, we will give at least 90 days of notice on this page so you can switch.

Contact

Questions or reports: hello@qrotto.com, or use the report page.