Last updated: 21 September 2026. This notice describes QR Rhino’s homepage static test, static-only Free account, and the limited Dynamic QR links already issued during testing. We will update it before introducing materially different features.
Who we are
QR Rhino is operated by Mark Minehan trading as QRrhino, the controller of personal information collected through qrrhino.com. For privacy enquiries and requests, email contact@qrrhino.com. For account and product support, email support@qrrhino.com.
What the current service does
You can try one static QR code on the homepage without an account and choose one PNG or SVG download. A verified Free account lets you save and manage up to 100 static URL QR codes, organise them in folders and use basic colour choices. Dynamic QR codes are not included in Free. QR Rhino issued a limited number of Dynamic links during testing; those use qrrhino.com/r/ and remain operational for their owners. A static code’s destination cannot be changed after printing; changing a saved destination produces a new code. Scan analytics, paid subscriptions and customer-logo uploads are not active in this release.
Information we use and why
For an account, we use your email address, account status, a password hash managed by WordPress, and the names, destination URLs, colours and dates of QR codes you save. For a previously issued Dynamic code, we also keep its random public identifier, status and destination-change history for 30 days. An administrator can pause a reported dynamic link; we record the reason and timing needed to investigate and restore it. We use this information to provide and protect the account and QR service you request, send essential account messages, and respond to support enquiries. Please do not put private information in a QR destination URL. Providing an email address is required to create an account; the optional marketing choice is not.
When someone scans an active previously issued Dynamic QR code, their device requests the QR Rhino link and receives a temporary redirect to the code owner’s chosen destination. That destination is a separate website with its own privacy practices. QR Rhino does not record scan totals, individual scan events, scanner location or device details in this release. HostArmada and Wordfence may separately process technical request and security logs, including IP addresses, to operate and protect the site.
The homepage test uses an essential first-party cookie, qrp_guest_trial, containing a random identifier. A matching server record holds the destination and colour for your one trial. The destination is cleared after the authorised download; the guest record expires after seven days and is removed by scheduled clean-up. To limit abuse, we keep short-lived pseudonymous request counters derived from the connecting IP address, rather than the raw IP address, for up to two hours. Our hosting and Wordfence security services may separately process technical logs, including IP addresses, to operate and protect the site.
Our lawful bases are providing the service you request for account and QR information, our legitimate interests in securing and troubleshooting the service for essential technical information, and your separate consent for any optional marketing emails. We may also process information to meet legal obligations. You can withdraw optional marketing consent in your account without losing access to the service. Password links and important service messages are not marketing.
Cookies and analytics
WordPress uses essential sign-in and security cookies. The homepage test uses the essential guest cookie described above. Dynamic redirects do not set a scanner cookie. Google Site Kit remains connected for site administration, but its Google Analytics visitor-tracking snippet is currently switched off. We are not currently using Meta Pixel, TikTok Pixel or QR scan analytics. We will introduce an appropriate consent choice before activating non-essential tracking that requires one.
Sharing, international processing and retention
We use HostArmada for website and email hosting and backups, and Wordfence for website security. These providers may process information needed to deliver and protect the service. We do not sell, rent or trade your information for others’ own marketing. Service providers may process information outside the UK; where a restricted transfer applies, appropriate legal safeguards are required. Contact us if you need details about a provider or transfer safeguard.
Account information and saved QR codes are kept while the account is active unless you ask us to delete them or a legal reason requires longer retention. A deleted saved static code disappears from your workspace immediately and is scheduled for permanent removal from the active database after 30 days. Retiring a dynamic code or erasing its owner’s account removes the owner, destination and change history from active records; we keep its random identifier as an unassigned tombstone so it cannot be issued again. A retired QR link no longer redirects. Guest destinations are cleared on download or expire after seven days; expired records are removed by scheduled clean-up. Security and support records are retained only as long as needed for those purposes. Deleted information can remain in protected hosting backups until the relevant backup is rotated out; backup availability and retention depend on the hosting account’s schedule. We do not collect QR scan histories in this release.
Your rights and choices
Depending on the circumstances, you may ask to access, correct, export or erase your information, restrict or object to some processing, and withdraw consent where consent applies. Email contact@qrrhino.com to make a request or ask for account deletion. We may need to verify your identity. You can also complain to the UK Information Commissioner’s Office via ico.org.uk.
Changes and contact
We will update this notice when QR Rhino’s features or data practices change and show the new date here. Contact Mark Minehan trading as QRrhino at contact@qrrhino.com with any privacy question.