Last updated: 23 October 2026
1. About this policy
This policy explains which cookies and similar technologies OpenQR.io uses on openqr.io and in the OpenQR dashboard (dashboard.openqr.io), why we use them, and how you can control them.
OpenQR.io is operated by Nerijus Oftas, individual activity certificate No. 649895, Siauliai, Lithuania (“OpenQR.io”, “we”, “us”). You can reach us at [email protected].
Cookies are small text files a website stores in your browser. Similar technologies include browser storage (localStorage and sessionStorage) and small scripts that measure how a page is used. In this policy we call all of them “cookies”.
2. Your choice and how consent works
We only use analytics and marketing cookies if you agree. Strictly necessary cookies are used without consent because the site cannot work securely without them.
On your first visit we show a cookie banner, managed by Cloudflare Zaraz. It offers two optional purposes:
- Analytics – helps us understand how visitors use openqr.io (pages viewed, sign-ups, purchases), using Google Analytics.
- Marketing – lets us measure which of our ads bring visitors who sign up or buy.
Both are switched off until you choose. “Accept All” turns both on, “Reject All” keeps both off, and “Confirm My Choices” saves only what you ticked. Your choice applies to openqr.io and dashboard.openqr.io and is stored for 12 months, after which we ask again.
You can change or withdraw your consent at any time via the Cookie settings link at the bottom of every page. Withdrawing consent does not affect processing that happened before.
We also pass your choice to Google using Google Consent Mode, so Google services know whether you have agreed to analytics and advertising.
3. Cookies we use
3.1 Strictly necessary (no consent needed)
These keep the site secure, remember your cookie choice, keep you signed in and protect payments.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| zaraz-consent | OpenQR (Cloudflare Zaraz) | Stores your cookie choices for openqr.io and the dashboard | 12 months | Cookie |
| _zaraz_google_consent_update | OpenQR (Cloudflare Zaraz) | Stores your choice in the format Google Consent Mode uses | Until you clear browser storage | Local storage |
| __cf_bm | Cloudflare | Distinguishes people from bots to protect the site | 30 minutes | Cookie |
| cf_clearance | Cloudflare | Shows that your browser passed a security check | Up to 30 minutes | Cookie |
| openqr-user | OpenQR | Keeps you signed in to the dashboard | Until you sign out | Local storage |
| g_state | Remembers the state of the “Sign in with Google” prompt in the dashboard | 6 months | Cookie | |
| __stripe_mid | Stripe | Fraud prevention when you pay for a subscription | 1 year | Cookie |
| sentryReplaySession | Sentry | Error monitoring: helps us find and fix technical errors in the dashboard | Browser session | Session storage |
| wpEmojiSettingsSupports | WordPress | Checks whether your browser can display emoji | Browser session | Session storage |
| wpformsChallengeTimerId, wpformsChallengeSecondsLeft | WPForms | Spam protection on the contact form | Browser session | Browser storage |
Site editors who log in to WordPress also receive WordPress login and settings cookies (wordpress_ and wp-settings- cookies). Visitors do not.
3.2 Analytics (only with your consent)
Set only after you accept Analytics. Data is sent to Google Analytics through Cloudflare Zaraz from Cloudflare’s servers, and your IP address is not passed to Google.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| cfz_google-analytics_v4 | Google Analytics via Cloudflare Zaraz | Random ID to recognise returning visitors | Persistent | Cookie |
| cfzs_google-analytics_v4 | Google Analytics via Cloudflare Zaraz | Groups your page views into one visit | Browser session | Cookie |
| google-analytics_v4_IfEX__* | Google Analytics via Cloudflare Zaraz | Session counter and time spent on page | Persistent | Browser storage |
| _zaraz_user_id | OpenQR (Cloudflare Zaraz) | Links analytics to your account when you are signed in to the dashboard; only sent to Google Analytics with your consent | Until you clear browser storage | Local storage |
We also use Cloudflare Web Analytics on all pages. It sets no cookies and does not identify you; it counts page views and measures how fast pages load.
3.3 Marketing (only with your consent)
We do not currently use marketing cookies. If we start, for example for Google Ads, they will be listed here and used only after you accept Marketing.
4. Third parties and data transfers
These providers process data on our behalf for the purposes above:
| Provider | What they do for us | Privacy information |
|---|---|---|
| Cloudflare, Inc. | Hosting security, consent banner (Zaraz), Web Analytics | Cloudflare Privacy Policy |
| Google LLC | Google Analytics (with consent), Sign in with Google | Google Privacy Policy |
| Stripe, Inc. | Payments and fraud prevention | Stripe Privacy Policy |
| Functional Software, Inc. (Sentry) | Error monitoring in the dashboard | Sentry Privacy Policy |
When you pay, you are redirected to Stripe Checkout (checkout.stripe.com). Stripe sets its own cookies there under its own policy.
Some of these providers are based in the United States. Transfers of personal data outside the EEA rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.
5. Managing cookies, changes and contact
Besides the Cookie settings link, you can block or delete cookies in your browser settings. If you block strictly necessary cookies, parts of the site and the dashboard may stop working, for example signing in or paying.
We update this policy when we add or remove a tool. The date at the top shows the latest version. If we add a new optional purpose, we will ask for your consent again.
You have rights under the GDPR, including access, correction, deletion and objection; see our Privacy Policy for details. Questions: [email protected].