Do QR Code Generators Track You?
Some do, some can't. A static code encodes your URL directly and has no tracking layer. A dynamic code routes each scan through the provider's server, which logs location, device, and time by default. The generator's own website may also track you as you use it — a separate question worth checking.
By Chaara, Founder of Qrogo · Updated July 25, 2026
There are two separate tracking layers
"Does it track me?" actually splits into two questions, and mixing them up is why the answers online are so muddy:
- The generator website — the site where you build the code. Like most sites, it may run its own analytics, ads, or third-party scripts while you're on it.
- The code it issues — whether the finished QR code reports back every time someone else scans it.
The second one is what matters after you print, and it comes down to static vs dynamic.
Static codes: no tracking layer
A static code encodes your real destination straight into the pattern. When someone scans it, they go directly to your URL — nothing passes through the generator's servers, so the generator can't count or locate the scan. There is simply no middleman to do the tracking.
Dynamic codes: tracking is the point
A dynamic code encodes a short link on the provider's domain that redirects to your destination. That redirect hop is exactly where tracking happens: the provider records the scan and can log approximate location, device and browser, time, and referrer. For many "free" tools this is the business model — the analytics dashboard is what they're selling, and your scanners' data is the raw material.
How to tell which kind you have
- Look at the encoded URL. If it's your actual link, it's static and untracked. If it's a short code on the generator's domain, it's dynamic.
- Watch the redirect. Scan it and see if you briefly pass through another domain before landing — that hop is the tracking step.
- Read the privacy policy. Search it for "IP address," "location," and "third parties." If they share data with ad networks, that tells you a lot.
What "privacy-first" actually means
It's not a slogan you can take at face value — it should map to concrete choices. For Qrogo it means:
- The designer runs in your browser — for a static code, your design never leaves the page.
- Static codes carry no redirect and no tracking layer.
- Dynamic-code analytics resolve to country only — no precise location, no device fingerprinting, no third-party trackers.
That's the honest version most tracking-funded tools can't offer, because it would remove the thing they sell. Full details on the privacy page.
Frequently asked questions
Do free QR code generators track scans?
Dynamic ones usually do — routing each scan through their server lets them log location, device, and time by default, because analytics is the paid product. Static codes have no tracking layer at all.
How can I tell if my QR code is tracked?
Check whether the code is static or dynamic. If the encoded URL is your real destination, it's static and untracked. If it's a short link on the generator's domain that redirects, it's dynamic and the provider logs the scan.
Which QR code generator is privacy-first?
Look for a client-side designer, static codes with no redirect, and analytics that stay coarse. Qrogo builds codes in your browser, adds no third-party trackers, and resolves dynamic-code analytics to country only.
Does the QR generator website itself track me?
It can — like any site, it may run its own analytics or ads while you use it. That's separate from whether the code tracks scanners. Qrogo's generator runs client-side and your design never leaves the browser for a static code.