QRMaker forms the matrix in browser memory and downloads data URLs. It never fetches the entered URL. Scanning and opening that URL later is a separate network action by the scanner.

Generation needs no payload request

URL and text values are passed directly to the bundled encoder. Analytics receives only low-cardinality settings such as payload type and correction level.

Opening a URL is not private by default

The destination and network can observe a normal visit according to their own policies. Local QR generation does not anonymize, validate or make that destination safe.

Downloaded files contain the payload

Anyone who can read the QR can recover its URL or text. Store and share downloaded files with the same care as the payload itself.