Privacy, in plain language.
Last updated: October 7, 2026. KitMoro QR Studio is operated by Qingping Liu. Contact: lqp946749974@gmail.com.
Static QR codes
Your pasted links and CSV files are processed in your browser. Static generation does not upload their contents. Downloads are created locally.
Dynamic workspaces
We store the link names and destinations you submit, creation and edit timestamps, a workspace identifier, hashed recovery keys and hashed session tokens. Destinations are disclosed through public redirects to anyone who has the short link. Do not put private credentials or sensitive personal data in destinations.
Access and recovery
An essential, HttpOnly session cookie keeps you signed in for 30 days. The recovery key is shown once; we store its hash. Anyone holding the key can manage the workspace. There is no email-based account recovery.
Statistics
We store daily aggregate visit counts per dynamic link. Requests may be filtered using the user agent. Raw IP addresses and user-agent strings are not saved to our analytics tables. IP addresses may be used transiently for abuse rate limiting. Cloudflare processes network request data to deliver and protect the service under its own policies.
Product usage measurement
We count page views, generation/download events, workspace creation and interest requests in daily aggregates, grouped by a fixed list of public page paths and source categories. Private link identifiers, query strings and file contents are not included in those aggregates. Source categories such as Google, ChatGPT, other AI referrals, direct and referral are derived in your browser; full referring URLs are not stored. A traffic-source category is kept in browser session storage so it remains consistent between pages; it contains no unique visitor identifier. Browser-side usage events are skipped when Do Not Track is enabled. Counts are approximate events, not verified unique users.
Pro interest
If you submit the interest form, we save your email, selected need and the proposed price shown. With your consent we may contact you about that request. It does not subscribe you to a paid service or a general marketing newsletter.
Hosting, retention and deletion
The service is hosted on Cloudflare Workers and D1. Workspace data remains until you delete it. Deleting a workspace removes its links, access records, per-link statistics and interest request from the live database. Anonymous aggregate usage counts remain. Cloudflare backup retention may delay removal from backups. To delete an interest email while retaining your workspace, contact support.
Your choices
You can export generated codes, edit or pause links, sign out, and delete the workspace from its dashboard. Directly encoded static codes remain usable after deletion.