Your content. Clear boundaries.

Browser extensions

The ScreenCode extensions for Chrome, Edge, Firefox, and Safari run only after you choose Select a QR code. ScreenCode temporarily freezes the visible area of the active tab in extension memory before showing the selection tool, displays that frozen image in a private closed interface, crops it to the rectangle you selected, and reads that crop locally on your device. This keeps the result tied to the pixels you saw even if a page changes afterward. The visible-tab capture, crop, decoded values, and payload classifications are not uploaded, transmitted to ScreenCode or a third party, logged, or saved.

The background copy of the full visible-tab capture is deleted as soon as the review screen retrieves it, or within 60 seconds if the scan is abandoned. The reader clears the full image after making the crop and clears the crop after decoding. The extension does not use analytics, remote decoding, remote code, or persistent storage. It never performs a decoded action without your explicit approval.

Embedded demonstration video

The browser extensions page includes a YouTube video using YouTube's privacy-enhanced embed. Loading or playing the video may send your IP address, browser details, and interaction information to YouTube or Google under their own privacy terms. No QR code, screenshot, or decoded value is included in that request.

Scan history

Scan history is off by default. If you turn it on, eligible decoded values are stored only in that browser's local storage. Images are never saved. Authenticator setup values and Wi-Fi credentials are excluded from history even when the feature is enabled.

Creation history

Creation history is off by default. It stores reusable setups after export on the device, or in your account as well when you explicitly enable cloud sync. Uploaded QR logos and Wi-Fi passwords are excluded from saved creation history.

Accounts and sign-in

SquarePi operates ScreenCode and is responsible for the personal information described here. Scanning, QR design, and Wallet design previews do not require an account. Saving and exporting QR codes or Wallet cards require sign-in. PNG and JPG exports are included with a free account; SVG export requires Pro. Sticker purchases remain disabled. Clerk processes account and authentication information on our behalf, including your account identifier, email address, profile information you supply, and session and security records.

If you choose Google, Apple, Microsoft, or another enabled sign-in provider, we receive the identity information authorized through that provider, such as an identifier, name, email address, and profile picture. Social sign-in does not give ScreenCode your provider password or unrestricted access to your files or messages. Clerk and the provider process connection and security information needed to authenticate you.

We use account information to sign you in, provide your plan features, protect accounts, and respond to support requests. Signing out does not delete your account or necessarily erase local content. On shared devices, clear saved content and sign out when finished.

Saved contact profiles

When you choose to save a contact profile, we store its name, contact details, and optional logo in your signed-in account on Cloudflare. Profiles are available across devices independently of the optional design cloud-sync setting. Free accounts can save one profile; Pro accounts can save unlimited profiles. You can edit or delete profiles on your Contact profiles page. Deleting a profile removes the active saved copy; it does not change QR codes, Wallet cards, or copies you already created from it. Restricted backups may persist until their retention period expires.

Optional cloud sync

Cloud sync is off by default. Turning it on in Account uploads saved QR designs and Wallet card content to Cloudflare storage associated with your account. Other browsers signed into the same account can retrieve that content. This includes saved contact information, social links, card photos, logos, and design settings. Scan history, scanned images, authenticator secrets, and Wi-Fi passwords are not included.

Cloud content is protected by authentication and service-provider security measures; this is not end-to-end encryption that hides content from ScreenCode. Sync requires internet access. Conflicting changes may require you to choose a version before syncing continues.

Turning sync off deletes the active cloud copies and keeps the copies on the browser where you turn it off. Other devices may retain local copies. Restricted provider backups may persist until their retention period expires. Minimal account and pass-identity records remain to provide your account and enforce card limits. Turning sync on again uploads the saved content you choose to keep.

Apple Wallet business cards

Saved Wallet card content stays on your device unless you enable cloud sync. When you download a pass, its contact details, selected social links, photo, logo, and styling are sent to our Cloudflare service for temporary processing. We sign the pass using an Apple-issued certificate and return it to your device. Apple does not individually approve each pass, and our signing operation does not send your contact details to Apple.

The signing operation does not retain Wallet card content, pass files, photos, or logos or intentionally place them in application logs. If you enable cloud sync, we separately store your saved card content, photo, and logo to restore them in other browsers. We retain separate account, entitlement, and pass-identity metadata needed to enforce the free allowance, associate a pass with its account, and reuse its identity when you edit or recreate it. These records are not a backup of your card.

Passes and contacts you choose to save or share are handled by your devices, Apple services where applicable, and recipients under their own settings and policies. Removing a card from ScreenCode cannot erase previously downloaded passes, screenshots, printed codes, or recipients’ copies.

Google Wallet business cards

When you choose Add to Google Wallet, we send the pass details and contact QR content to Google to create or update a pass in your Google account. Google stores and processes this information under its own privacy terms, even when ScreenCode cloud sync is off. This is separate from signing an Apple Wallet file.

To display Google pass images, ScreenCode hosts optimized copies of the logo and profile photo on Cloudflare at unlisted, randomly generated URLs. Anyone with an image URL can retrieve that image; these URLs are not authenticated or end-to-end encrypted. We retain the current image copies to keep the pass working. Updating the Google pass replaces older hosted copies. Deleting the saved card through ScreenCode removes its hosted Google images, but does not erase copies already cached by Google, installed passes, or recipients’ contacts. Disabling cloud sync does not remove these pass images. You may also contact us to request their deletion.

Editable card drafts continue to follow your cloud-sync setting. Google pass processing is initiated when you choose the Google Wallet action; ordinary local editing does not send the draft to Google. We do not intentionally log contact details, image content, service account keys, or signed save links.

Subscriptions, payments, and sticker orders

Stripe processes subscription and order payments. Payment details go to Stripe; ScreenCode does not store full payment-card numbers or security codes. We retain the account or order identifiers, subscription status, transaction references, and billing records needed to provide service, handle disputes, and meet accounting obligations.

When you order stickers, your artwork and its encoded content must be sent for production. We and our fulfillment providers, including Sticker it and delivery services, process the order details, shipping and contact information, and artwork needed to manufacture, deliver, and support your order. Guest checkout still involves this information processing. Order artwork is an exception to local-only QR storage.

Support and service providers

If you contact us, we receive the contact details and message you provide and retain the correspondence as needed to resolve the request. Avoid sending passwords, authenticator secrets, or unnecessary sensitive information.

Our providers include Cloudflare for hosting and processing, Clerk for identity, Stripe for payment, Sticker it for fulfillment, and email and delivery providers for communications and shipping. Information is disclosed as needed for those functions. We may also disclose information when legally required, to protect rights and security, or as part of a business transfer subject to applicable protections. We do not sell personal information or share it for cross-context behavioral advertising.

Cookies and device storage

Essential cookies and similar technologies support sign-in, security, and preferences. Local browser storage holds saved content and settings; account signup alone does not enable cloud sync. Clearing browser data, using private browsing, or changing devices can remove access to that content. We store your analytics choice in this browser for six months. Optional Google Analytics cookies are used only after you accept. Choose Change analytics settings, leave Basic visit analytics off, and save your preferences to decline analytics and continue scanning. You can reopen Cookie settings in the footer at any time. Closing settings without saving keeps your previous choice; analytics stays off if you have not made a choice. Turning analytics off and saving after acceptance stops analytics measurement and removes this site’s Google Analytics cookies. Embedded media is separate and may use additional cookies or identifiers. Browser settings can restrict these technologies, although blocking essential cookies may prevent sign-in.

Limited site analytics

Tracking details updated October 20, 2026.

If you accept analytics, we load Google Analytics 4 for limited, on-site measurement of page views, sessions, traffic sources and broad device categories on public pages. Scroll activity (reaching 90% of a page) is a separate optional setting that requires basic visit analytics. The settings panel initially shows both options on for new visitors, but measurement stays off until you accept analytics or save enabled preferences. Closing the panel does not enable measurement. Account, administration, checkout, contact and unknown routes are excluded. Reported page addresses omit query strings and fragments, page names come from a fixed list, and referring addresses are reduced to their website origin. We disable automatic detection of user-provided contact details. We do not enable Google Signals, advertising personalization, User-ID, cross-site advertising tracking, outbound-click tracking, form tracking, site-search tracking, file-download tracking, or video tracking.

ScreenCode does not send Google Analytics any uploaded image, decoded QR or barcode value, opened destination, contact detail, Wi-Fi credential, authenticator secret, or generated file. Basic hosting infrastructure may still process ordinary connection data needed to deliver the site, such as an IP address and browser request headers.

Opening external links

ScreenCode shows a decoded destination before opening it and flags several common warning signs. Once you choose to visit another website, call a number, open a payment app, or use another external service, that destination controls its own data practices. ScreenCode cannot make the rest of the internet behave itself.

Offline use

After the web app has been installed and cached, supported scanning and generation features can continue to run offline. Link destinations and other external actions still require the relevant network or app.

Chrome Web Store Limited Use

ScreenCode's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Retention, deletion, and your choices

Local content remains until you delete it or your browser removes it. Account and pass-identity records are retained while needed to provide your account and enforce its allowances. Billing, order, support, and security records may be retained longer where needed for fulfillment, disputes, fraud prevention, or legal obligations. Deletion from active systems may precede expiration of restricted backups under our providers’ retention schedules.

You can clear locally saved items using the app or browser controls. Account deletion does not clear files or installed passes from your devices. To request access, correction, deletion, or a copy of personal information we hold, or to exercise other rights available in your location, contact us. We may need to verify your identity and may retain records where legally permitted or required. We cannot recover content stored only on your device. When sync is enabled, deleting saved content also removes it from the active cloud library after synchronization; disconnected devices may retain older local copies.

Location, security, and children

ScreenCode is operated from the United States, and our providers may process information in other countries under applicable data-protection arrangements. Where relevant law requires a lawful basis, we process information to provide the service you request, meet legal obligations, protect legitimate security and operational interests, or with your consent where required. You may withdraw consent for optional processing and contact us about applicable rights, including complaints to your local data-protection authority.

We use safeguards appropriate to the service, but no system can guarantee absolute security. Accounts are not intended for children under 13 or a higher minimum age required locally. If you believe a child has provided account information without required authorization, contact us.

Policy changes and contact

We will date updates and provide notice of material changes where required. For privacy questions or requests, contact SquarePi through ScreenCode. See also our Terms of Service.