QR Workshop
Privacy policy
Last updated: 20 October 2026 · Deutsche Version
In short. QR Workshop collects no data. There is no account, no sign-in, no analytics and no advertising, and the provider runs no server the app talks to. Everything happens on your device. The one exception: if you agree, for a single operation, the app resolves a short link online, and your IP address is sent to the providers involved.
Controller
Dominik Peuscher
c/o MDC#1496
Welserstraße 3
87463 Dietmannsried
Germany
Email: business@dpeuscher.de
What stays on your device
- Camera image
- Scanning happens on your device. Camera images are neither stored nor sent.
- Photos, screenshots and PDFs
- A picture or PDF you choose to scan, or share to the app, is read on your device and not kept. The password of a protected PDF is only used for that; it is neither saved nor sent.
- Scan history
- Content, code format and time of each scan, stored as a file in the app’s own storage with iOS data protection. It is never synced or uploaded by the app. Like other app data it can be part of your device backup (iCloud or computer) if you have backups switched on. Delete single entries or the whole history in the app; deleting the app removes it completely.
- Codes and 3D models you create
- Generated on your device. They leave it only when you share or save them yourself.
- Settings and suggestions
- Your PayPal.Me default recipient and the last invoice number used for a GiroCode are kept in the app’s settings on your device. They are not synced or uploaded by the app. A PayPal code only contains a paypal.me link; the payment itself happens at PayPal when someone scans it.
The one network connection: resolving short links
If a scanned link points to a known short link service, you can have the real destination determined. Before anything is sent, the app asks for your consent. The consent applies to that one operation only and is asked for again next time.
- The app sends HEAD requests (no page content is downloaded) to the short link service and to each redirect target, at most five, with a time limit of eight seconds.
- These providers receive your IP address and the requested address, as with any web request. Which providers these are depends on the link; the provider of QR Workshop is not one of them and receives nothing.
- The destination is not opened. The app checks it again on your device and shows it to you. Opening it is a separate decision.
If you do not agree, no request is made and the local preview stays available. Apart from this, the app makes no network connections of its own.
When data leaves your device because you choose to
- Opening a link passes it to your browser or the app in question. From then on their privacy policies apply.
- Sharing a code, PDF or 3D model goes to the destination you pick in the share sheet.
- Joining a Wi-Fi network, saving a contact, adding an event or saving to Photos hands the data to iOS, only when you tap the button. iOS asks for the matching permission first.
Permissions
- Camera – to scan codes. Images never leave your device.
- Contacts – only to save a contact from a scanned code when you tap Save.
- Calendar (add only) – only to add an event from a scanned code when you tap Add.
- Add to Photos – only to save a generated code when you choose to.
Every permission is optional. Without it, only the matching function is unavailable.
No third parties
The app contains no third-party libraries, no analytics tools, no advertising networks and no third-party crash reporters. There is no tracking in the sense of Apple’s App Tracking Transparency framework.
What Apple collects
Downloads from the App Store and TestFlight go through Apple. Which data Apple processes is determined by Apple; Apple’s privacy policy applies. If you agree to share analytics in your device settings, the provider can see aggregated, non-personal figures about installations and crashes from Apple. They do not allow conclusions about individual people.
This website
This website sets no tracking cookies and loads nothing from other servers. If you pick a language from the menu, it remembers that choice in a cookie called lang for one year. To deliver the pages, the web server processes your IP address and the requested page; this is technically necessary (Art. 6(1)(f) GDPR).
Your rights
The GDPR gives you rights of access, rectification, erasure, restriction, data portability and objection. Since the provider processes and stores no personal data through this app, there is nothing to provide information about or to delete. Your data is on your device and disappears completely when you delete the app.
For questions or complaints, contact the controller at the address above. You also have the right to lodge a complaint with a data protection supervisory authority.
Changes
If something changes in the app that affects this policy, it will be updated here. The date at the top shows the current version.