Private QR Code Generator
Your URLs stay on your device. The code is built in your browser, no account is involved, and nothing about your link is uploaded, stored, or tracked.
What makes this generator private
QR From Link is a private QR code generator: the QR code is encoded by JavaScript running on your own device, and the link you enter is never included in any network request, so it is never sent to a server, stored, or logged.
Most QR code generators send the link you type to their server, which encodes it and sends back an image. That server sees every URL: the unreleased product page, the internal document, the client’s address. Many of them also wrap the destination in a redirect, so they see every scan afterwards too.
This one works the other way round. The encoder runs in the page you already loaded. When you select Generate QR, your browser does the arithmetic locally and draws the result — your link never leaves the tab. You can prove it with the Network panel of your browser’s developer tools, or by turning off your connection after the page has loaded: the generator keeps working.
How to verify these claims yourself
- 01
Open the Network panel
Press F12, choose Network, and clear the log. Then paste a link and select Generate QR. The generator sends nothing. You may see requests to Google Analytics recording the visit — open any of them and search for your link: it is not there.
- 02
Go offline and try again
Switch the Network panel to Offline, or turn off Wi-Fi. Generating and downloading both still work, because nothing about them needs a server.
- 03
Check what is stored
Look under Application → Local Storage and Cookies. The generator keeps one key, theme, holding light or dark. The Google Analytics cookies hold a random visitor ID. None of them contains a URL you typed.
- 04
Read the source
The generator is a static bundle whose encoder makes no requests. The outside scripts the page loads come from Google, and none of them is ever given the link you type.
What this does and does not see
Your link: never transmitted
The URL you type stays in the page. It is not sent, not saved to storage, not written to a cookie, and not included in any request. Closing the tab ends its existence.
No accounts, no email
There is nothing to sign up for, so there is no profile, no password, and no address to leak. The tool works the moment the page loads.
Analytics counts visits, never links
The site uses Google Analytics to see how many people visit and which pages help them, and it sets cookies to do that. It never receives the link you encode: the generator does not pass it on, and it never appears in the page address.
No redirect on the scan
The code encodes your destination directly. Nobody, including this site, can count scans or see who scanned — there is no intermediary to do the counting.
What is stored locally
The generator keeps one value, theme, remembering whether you chose light or dark. Google Analytics adds its own cookies with a random visitor ID. No link you encode is ever stored, by the page or by anything it loads.
What qrfromlink.com does see
Loading this page is an ordinary web request, so the hosting provider handling it sees what any web server sees: that a request happened, from an IP address, with a browser user-agent. That is the page request itself — it happens before you type anything, and it carries no knowledge of the link you go on to encode.
When the difference actually matters
- Unreleased product and campaign pages
- Internal documents and intranet links
- Client and patient-facing material
- Legal and financial documents
- Pre-announcement press material
- Staging and preview URLs
- Personal addresses and booking links
- Anything under embargo or NDA
A QR code is not encryption. Anyone who can see the printed code can read the URL inside it — privacy here means the link is not disclosed to this site while you make the code, not that the code keeps a secret afterwards.
If the destination itself must stay private, protect the page: a login, an unguessable address, or an expiring link. The code will happily encode any of them.
Questions about this
No. The link is never transmitted, never written to storage, and never recorded anywhere. It exists only in the memory of the tab you have open, and disappears when you close it.
Yes. Encoding runs as JavaScript on your own device, and the link is never sent anywhere. The simplest proof is to disconnect from the internet after the page has loaded — generating and downloading both still work.
Yes. The site uses Google Analytics, which sets cookies with a random visitor ID, to measure how many people visit and which pages are useful. It sees the visit, not your link: the URLs you encode are never sent to Google or to anyone else.
Yes, Google’s scripts. The generator itself, its styles, and its fonts are served from this domain, and no outside script is ever handed the link you type. What a third party can learn is that you visited — not what you encoded.
No, and nor can anyone else. The code encodes your destination directly, with no redirect service in the middle, so there is no point at which a scan could be observed or counted by a third party.
Only the ordinary record of the page being requested — an IP address, a timestamp, a user-agent — the same thing any web server records when it sends you a file. That happens when the page loads, before you type anything, and it contains nothing about the link you encode afterwards.
Once the page has loaded, yes. Generating and downloading need no connection at all, which is both a convenience and the clearest demonstration that your link is not being sent.