Privacy notice

What this service does. A QR code printed by one of the projects using this service contains a link to link.broker. When you scan it, this service looks up the code and redirects you (or shows you a page with a single link) to the page the code is assigned to. It never shows you the destination's content itself.

No cookies. This service sets no cookies, stores nothing in your browser, loads nothing from third parties, and does not try to identify you across visits. Because of that, there is no consent banner: there is nothing to consent to.

What a scan records. One event per scan, containing only: the minute (UTC); which code was scanned and which project and surface it belongs to; what happened (redirected, preview shown, retired, not found, rate-limited); the country, region and city that the hosting platform derives from your network address; the platform location that served you and your network's operator number; whether the device looked like a phone, a desktop or an automated client; your browser's first preferred language; which rule the assignment applied; and a one-way hash of your network address and browser identifier, salted with a value that changes daily, so repeated scans within a day can be told apart and nothing can be linked after that.

What is never recorded. Your network (IP) address itself, your full browser identifier, the page you came from, precise coordinates, postal codes, any parameter in the link, and anything about what you do on the destination site.

Why. Security (detecting attempts to guess codes or abuse the service) and aggregate statistics for the project that printed the code (how many scans, from which countries, on which kind of device). This is processed on the basis of legitimate interest; it is not used for advertising or profiling.

How long. Raw scan events are kept by the hosting platform for at most three months. Daily aggregates (counts per code per day, by country, region, device class and outcome — never individual events) are kept indefinitely. Any figure below five is shown to project owners as “fewer than five”.

Who. The controller for this processing is Andrew Nimmo. The hosting platform (Cloudflare) processes the data on the controller's behalf under its data processing agreement. The projects whose codes resolve here link to this notice from their own privacy pages.

Your rights. Under the GDPR and UK GDPR you may ask what is held about you, ask for it to be corrected or erased, and object to the processing. Because the service keeps no identifier that can be matched to you after a day, such a request can in practice only cover the current day's salted hashes, which are discarded in any case.

Version 0.1 — draft, pending professional review (PRIV-06).