Steady QR privacy policy and terms

Last updated 29 October 2026. Steady QR is made by Onibaku (admin@onibaku.co.uk).

Privacy

Free static codes

Static codes are made in your browser. What you type, and any logo you add, never reaches our server.

Dynamic codes

• What we store: each code’s destination, the name you give it, when it was made and changed, and a running scan count with the date of the last scan. Codes are tied to a one-way hash of your licence key, not to your name or email.
• Scans: when someone scans a code we count it. We don’t store their IP address, device, location or anything else about them.
• Safety checks: destinations are sent to Google Web Risk to check they aren’t listed as phishing or malware, under Google’s privacy policy.
• Reports: if you report a code we keep what you wrote and a one-way hash of your IP address, so one person can’t report the same code many times.

Payments and licence keys

Payments go through Stripe, which handles your card under its own privacy policy. Our licence server keeps your licence key, the email you gave Stripe (so we can email you your key if you lose it) and an anonymous ID per browser, to limit how many browsers one key works in.

Page counts

We count page views with our own GoatCounter (no cookies, no personal data): the page, the referrer and the screen width.

Ask us to delete your codes or licence data any time at admin@onibaku.co.uk. Deleted codes stop redirecting.

Terms

• Codes keep redirecting. A dynamic code keeps sending people to its last destination after your pass ends. A pass ending only stops you making new codes and changing destinations.
• If we ever close, we’ll email every pass holder at least 12 months ahead and keep redirects running for that time.
• What you can’t link to: phishing, malware, scams, illegal content, or anything that impersonates someone else. We switch off codes that do, without refund.
• Limits: up to 250 dynamic codes per key, and 30 new codes a day.
• Refunds: within 14 days of buying, no questions asked.
• Static codes are yours to use for anything, commercial included. Steady QR is provided as is; we’re not liable for losses from a code that doesn’t scan or a destination you chose.