Effective Date: March 15, 2026 — Last Updated: March 15, 2026
1. What Are Cookies?
Cookies are small text files that websites store on your device. They serve various purposes, from remembering your preferences to tracking usage patterns. Some cookies are set by the website you visit ("first-party"), while others are set by third-party services embedded in the page ("third-party").
QR Stealth also uses localStorage, a browser storage mechanism similar to cookies but that never gets sent to any server automatically. We use localStorage for your theme preference, cookie consent choice, and language preference.
Under the EU ePrivacy Directive, localStorage and similar browser storage technologies are subject to the same consent requirements as cookies. Our essential localStorage items (theme, consent state, and language preference) qualify for the "strictly necessary" exemption and do not require consent.
2. Cookie Categories
We organize cookies into three categories based on their purpose:
2.1 Essential (Always Active)
These are strictly necessary for the website to function. They cannot be disabled. QR Stealth uses localStorage (not traditional cookies) for essential functionality:
| Name | Type | Purpose | Duration | Data Stored |
|---|---|---|---|---|
qr-theme |
localStorage | Saves your light/dark mode preference | Until cleared | The string "light" or "dark" |
qr-cookie-consent |
localStorage | Stores your cookie consent preferences | 12 months | JSON: consent choices, timestamp, expiry |
qr-lang |
localStorage | Saves your preferred language for the interface | Until cleared | Language code (e.g., "en", "es", "fr") |
Important: localStorage data is stored only on your device and is never automatically transmitted to any server, unlike traditional cookies.
2.2 Analytics (Requires Consent)
If you consent, Google Analytics cookies help us understand how visitors use the site so we can improve it. IP anonymization is enabled.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics | Distinguishes unique visitors using a randomly generated number | 2 years |
_ga_* |
Google Analytics | Maintains session state (pages visited, time on site) | 2 years |
_gid |
Google Analytics | Distinguishes visitors within a 24-hour window | 24 hours |
_gat |
Google Analytics | Throttles request rate to limit data collection | 1 minute |
What Google Analytics collects: Pages viewed, time on page, referring website, general geographic location (country/city, not precise), device type, browser type, screen resolution. All data is aggregated and anonymized. It cannot identify you personally.
What Google Analytics does NOT collect: Any content you type into the QR generator, uploaded images, generated QR codes, or any personally identifiable information.
2.3 Advertising (Requires Consent)
If you consent, Google AdSense cookies enable display advertising that funds the free service. These cookies may personalize ads based on your browsing activity across the web.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
__gads |
Google AdSense | Measures ad interactions and prevents showing the same ad repeatedly | 13 months |
__gpi |
Google AdSense | Groups users for ad targeting without personal identification | 13 months |
IDE |
Google DoubleClick | Used to serve targeted ads and measure campaign performance | 13 months (EU) / 24 months (non-EU) |
NID |
Stores preferences and information for Google ads | 6 months | |
DSID |
Google DoubleClick | Identifies signed-in users for ad personalization | 2 weeks |
1P_JAR |
Gathers website statistics and tracks conversion rates | 1 month |
How ad cookies work: Google's ad network may track your browsing activity across websites that use AdSense to build an interest profile. This profile is used to show you ads that may be more relevant to your interests. This tracking is performed by Google, not by QR Stealth.
Critical distinction: Ad cookies track your general browsing patterns across the web. They do not and cannot access the content you enter into the QR code generator, because your QR data never leaves your browser.
3. Your Consent Choices
When you first visit QR Stealth, a consent banner gives you three options:
- Accept All: Enables analytics and advertising cookies
- Save Preferences: Lets you enable/disable analytics and advertising independently
- Reject Non-Essential: Only essential localStorage items remain active. No analytics. No ads tracking. You can still use every QR Stealth feature.
Your consent choice is stored in localStorage (not a cookie) and expires after 12 months, at which point you'll be asked again.
4. Managing Your Preferences
You can change your cookie preferences at any time:
- On-site: Click "Manage Cookie Preferences" in the footer of any page
- Google Ads: Manage ad personalization at Google Ads Settings
- Google Analytics: Install the Google Analytics Opt-out Browser Add-on
- Industry opt-out: Visit the Digital Advertising Alliance or Your Online Choices (EU)
- Browser settings: Most browsers allow you to block or delete cookies. Refer to your browser's help documentation.
- Clear all: Clear your browser's localStorage and cookies to reset all preferences
5. Do Not Track
QR Stealth respects the Do Not Track (DNT) browser signal. If your browser sends a DNT header:
- We automatically set your consent to "Reject Non-Essential"
- No analytics or advertising scripts are loaded
- You'll see a brief notice confirming DNT is active
- You can still manually opt in via the "Manage Cookie Preferences" footer link if you choose
We also plan to support the Global Privacy Control (GPC) signal, which is legally recognized under the California Consumer Privacy Rights Act (CPRA) as a valid opt-out mechanism.
6. Impact of Rejecting Cookies
If you reject all non-essential cookies:
- QR generator: Fully functional. Zero impact. Every feature works exactly the same.
- Theme preference: Still saved (uses localStorage, not a cookie)
- Ads: You may still see ads, but they won't be personalized to your interests. They'll be generic/contextual instead.
- Analytics: Your visit won't be counted in our traffic statistics
There is no penalty for rejecting cookies. We will never degrade the service, gate features, or nag you to reconsider.
7. CCPA: Do Not Sell My Personal Information
Under the California Consumer Privacy Act (CCPA), the use of advertising cookies may be considered a "sale" of personal information. California residents have the right to opt out of this sale.
To opt out: Click "Reject Non-Essential" on the cookie consent banner, or click "Manage Cookie Preferences" in the footer and disable "Advertising Cookies." This stops all advertising-related data sharing with Google's ad network.
QR Stealth does not sell any data that you enter into the QR code generator. That data never reaches our servers or any third party.
8. International Compliance
- GDPR (EU/EEA): Non-essential cookies are blocked until you give explicit, informed consent via the banner. You can withdraw consent at any time. Consent is granular (analytics and advertising are separate choices).
- ePrivacy Directive (EU): The consent mechanism complies with the requirement to obtain consent before placing non-essential cookies.
- CCPA (California): Opt-out mechanism for data "sale" via advertising cookies is provided (see Section 7).
- LGPD (Brazil): Same consent-first approach applies.
- PIPEDA (Canada): Implied consent model supported; explicit opt-out available.
9. Changes to This Policy
We may update this Cookie Policy to reflect changes in the cookies we use or for legal/regulatory reasons. Material changes will be indicated by updating the "Last Updated" date. If we add new cookie categories, your consent preferences will be reset so you can make an informed choice about the new cookies.
10. Contact
Questions about our use of cookies? Contact us or email [email protected].