QR■Forge quiet qr codes · drawn in your browser

Sheet 08 · the receipts

A password should not take a round trip.

Every QR generator asks you to send the text to a server first. This one does not, and you can check that claim in the network panel in five seconds.

01

Content

pick what goes inside
02

Appearance

4
10px
03

Plate

waiting for input

The payload is the sensitive part

A QR code generator sounds harmless until you notice what people put in them: Wi-Fi passwords, unlisted phone numbers, private event addresses, internal links on a company intranet.

Most generators accept that text, send it to a server, draw the image there and send it back. It works. It also means the password you typed exists in somebody else's request log, and you have no way to know for how long.

What this site does instead

The generator is a script that loads with the page. After that, the tab makes no requests at all. Open the network panel, type a password, and watch the list stay empty. That is the entire privacy design, and it is verifiable in about five seconds.

What is not here

  • No account and no sign-up.
  • No analytics, no pixels, no session recording.
  • No cookies, so no consent banner.
  • No server-side generation, therefore no upload.
  • No expiry date quietly applied to your printed code.
A tool that asks you to upload a password to draw a picture has already failed the only test that matters.

How to check

Open developer tools, switch to the Network tab, clear it, then type into the form. If new requests appear, this site is lying to you. They do not.

Privacy questions

Can you prove nothing is uploaded?

Open the browser's network panel before typing. The only requests are the page, the stylesheet, two scripts and the icon. Typing adds none.

Is there analytics or a cookie banner?

No analytics, no cookies, no fingerprinting, no banner. There is nothing to consent to because there is nothing being collected.

Does the desktop build phone home?

No. It runs from a folder with no licence check and no telemetry, which is why it works with the network unplugged.

Why does this matter for a QR code?

Because the payload is often a password, a phone number or an unlisted address. Uploading it to generate a picture turns a local operation into somebody else's log file.

Do you keep the codes I generate?

There is nothing to keep. Nothing leaves the tab, so there is no store, no database and no backup containing your data.

Other sheets

QR Forge Desktop — $19 once

Everything on this page, minus the browser tab and the limits: batch generation from a CSV, your logo in the middle, vector PDF for print shops, and a folder you can keep on a machine that never goes online.

$19one time · no subscription
Get the desktop build