Privacy Policy
Last updated: October 28, 2026
CSSmith processes everything in your browser. Text you encode into a QR code, images you decode, colours you pick and SVG you paste are never transmitted.
What we store
A single localStorage flag (cssmith_cookie_ok) records that you dismissed the cookie notice. Nothing else is stored on your device by us.
Cookies and advertising
We use a lightweight traffic counter and, if advertising is enabled, Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on prior visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings.
Uploads
Images you drop into the QR scanner are read with the browser's File API and decoded in memory. Nothing is uploaded, and the object URL is revoked immediately after decoding.
International visitors (GDPR)
For EEA/UK visitors, the lawful basis for analytics and advertising cookies is consent, managed through the notice and your browser settings.
California rights (CCPA)
We do not sell personal information. Advertising providers may share data for cross-context behavioural advertising; opt out via Google Ads Settings or Global Privacy Control where supported.
Children
CSSmith is a general-audience developer tool and does not knowingly collect data from children under 13.
Frequently Asked Questions
Are my QR payloads stored?
No. Encoding happens locally; there is no server to store them.
Can I use the site without cookies?
Yes — blocking cookies only affects analytics and ads.