Legal

Privacy Policy

Last updated: 5 July 2026

The short version: When you make a QR or vCard code on 123smith, everything happens inside your browser. The details you type are never sent to us. We don't run ads, we don't sell data, and there's no account to create for the free tools.

This policy explains what 123smith ("we", "us") does — and mostly does not do — with your information when you use 123smith.com (the "Service"). It's written to be read by humans.

1. Information generated on your device

The core of 123smith runs entirely in your browser. When you type a name, phone number, link, WiFi password or any other detail to build a code, that content is processed locally on your device to draw the QR code. It is not transmitted to our servers, logged, or stored by us. If you close the tab, it's gone.

2. What we store on your device

Local storage: If you unlock Signature, we store a small flag in your browser's local storage so the app remembers you're a Signature user. This never leaves your device.
No advertising or tracking cookies. We do not use third-party advertising, cross-site tracking, or fingerprinting.

3. Payments (Signature & subscriptions)

If you purchase 123smith Signature or a subscription, payment is handled by our merchant-of-record, Polar. We never see or store your full card details. Polar processes your name, email and payment information to complete the sale, provide receipts, and handle tax. See Polar's own privacy policy for details. We receive only what we need to grant your license and support you (such as your email and order reference).

4. Optional dynamic codes & analytics

Our optional paid dynamic QR codes work by encoding a short 123smith link that redirects to a destination you can change anytime. They require an account and a subscription, and are always clearly labelled as dynamic. If you create one, then:

We store the code's destination and settings so the redirect works and you can edit it.
When someone scans it, we record aggregate, privacy-respecting scan data — a timestamp, an approximate country (derived from IP, which we do not store in full), and a device type — so you can see how your code performs.
We do not build advertising profiles of the people who scan your codes.

None of this applies to the free, on-device (static) codes, which never involve our servers at all.

5. Hosting & infrastructure

The Service is hosted on Cloudflare. Like any web host, Cloudflare may process limited technical request data (such as IP address) to deliver and secure the site. This is standard operational data, used for security and reliability, not for advertising.

6. Your rights

Because we hold almost nothing about you, there is usually nothing to export or delete. Where you have purchased something or created dynamic codes, you may contact us to access, correct, or delete the associated account data, consistent with GDPR, UK GDPR and CCPA where applicable. Reach us through our contact page.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them.

8. Changes to this policy

We may update this policy as the Service evolves. We'll revise the "last updated" date above, and for material changes we'll make it clear on the site.

9. Contact

Questions about privacy? Contact us and a real person will reply.