# QRLagoon — full reference

> QRLagoon (https://qrlagoon.com/en) is a privacy-friendly QR code platform for creating dynamic (editable) QR codes, tracking scans with analytics, and printing branded PDF posters for offline marketing. This document is the complete single-file reference for LLMs and AI assistants; the short index lives at https://qrlagoon.com/llms.txt.

## What QRLagoon is

QRLagoon helps businesses run trackable offline marketing campaigns. You create a QR code, print it on menus, flyers, posters, yard signs, business cards, or stickers, and then measure and adjust performance without reprinting. Marketing pages are server-rendered and the product is available in English and Ukrainian.

Two kinds of QR codes:

- Static QR codes encode the destination directly. No signup, work forever, but cannot be changed after printing and produce no analytics.
- Dynamic QR codes encode a QRLagoon short link that redirects to a destination you control. You can change the destination at any time (the printed code keeps working), and every scan is recorded for analytics.

## Who it is for

- Restaurants and cafés — menus on table tents, takeaway bags, and window stickers.
- Real estate agents — yard signs that let drive-bys self-serve listing photos, price, and virtual tours 24/7.
- Clinics and medical offices — reception and waiting-room signage that drives online self-booking (no PHI passes through QRLagoon).
- Salons and barbershops — mirror stickers and cards that let clients self-book (Booksy, Square, Fresha, GlossGenius).
- Marketing agencies and multi-location businesses — organise QR codes by client/campaign and share branded, read-only client portals.

## Features

- Dynamic QR codes with editable destinations (re-point a printed code in seconds).
- Privacy-friendly scan analytics: day, hour, country, city, device, OS, browser, unique scans, CSV export.
- Branded QR styling: custom colours, colour presets, dot styles, and logo embedding.
- Print-ready A4 PDF posters at 300 DPI with industry templates and editable copy.
- Smart redirect rules: route scans by country, device, or local-time schedule (first match wins).
- A/B testing: split traffic across up to 10 destination URLs by weight, with per-variant analytics.
- Bio-link pages: branded link-in-bio pages with built-in click analytics.
- AI QR art: scannable QR-shaped artwork generated with Stable Diffusion + ControlNet (paid feature).
- Custom domains: serve printed QR codes under your own branded hostname (paid feature).
- Team seats and roles (owner / admin / member) with workspace-scoped permissions.
- White-label client portals: read-only, branded analytics cabinets for end-clients (Agency plan).
- Webhooks: signed (HMAC-SHA256) POST on every scan for Slack, CRMs, n8n, or Zapier.
- Bulk CSV import and an HTTP API with API keys.
- UTM builder and optional weekly email digest of scan performance.

## Supported QR content types

- Website / URL
- Wi-Fi network (SSID + password)
- Contact card (vCard)
- Plain text
- Email address (with optional subject/body)
- Phone number (tap to call)
- SMS (number + pre-filled message)
- WhatsApp (number + pre-filled message)

## Plans and limits

| Plan | Price | Dynamic QR | Analytics retention | Bio links | AI renders/mo | Custom domains | Team seats | Client portals |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| Free | Free ($0) | 3 | 7 days | 1 | — | — | 1 | — |
| Pro | $9/mo | 100 | 365 days | 10 | 20 | 1 | 3 | — |
| Agency | $49/mo | 500 | 365 days | 50 | 100 | 5 | 20 | 10 |

Static QR codes are unlimited on every plan. Prices are in USD per month: Free is $0, Pro is $9, and Agency is $49. Paddle.com is the merchant of record for paid plans (handling billing, invoicing, and tax). See https://qrlagoon.com/en/pricing.

## Billing and refunds

Paid plans renew automatically each billing period via Paddle until cancelled, and can be cancelled any time from the dashboard (cancellation takes effect at the end of the current paid period). A first paid subscription can be refunded in full within 14 days for any reason, self-service from the Billing page; other cases are reviewed manually. Full policy: https://qrlagoon.com/en/refunds.

## Privacy and security

- Hashed identifiers: scan IP addresses are hashed with SHA-256 using a salt that rotates every 24 hours. Only the hash is stored; after rotation it cannot be reversed even by QRLagoon. The same approach is used for User-Agent–based unique-device counting.
- Local GeoIP: country/city enrichment uses a local copy of the MaxMind GeoLite2 database; the IP never leaves the server for this lookup.
- No GPS coordinates are collected, and there are no third-party trackers (no Google Analytics, Facebook Pixel, Hotjar, Segment, Intercom, or Mixpanel).
- Authentication uses better-auth with secure, HTTP-only session cookies and CSRF protection; passwords are hashed one-way and never stored in plaintext.
- All traffic (dashboard and the redirect endpoint) is served over HTTPS with HSTS.
- Data retention: scan events are retained per plan (7 days on Free, 365 days on Pro and Agency). Account data is kept until you delete your account.
- Rights: GDPR / CCPA / UK GDPR data-subject requests (access, export, deletion) are answered within 30 days via privacy@qrlagoon.com.
- Details: https://qrlagoon.com/en/privacy and https://qrlagoon.com/en/security.

## Industry solutions

- [QR code for restaurant menu](https://qrlagoon.com/en/qr-code-for-restaurant-menu): QR code generator for restaurant and café menus, with print-ready A4 PDF table tents. No signup required.
- [QR code for real estate signs](https://qrlagoon.com/en/qr-code-for-real-estate-signs): QR codes for real-estate yard signs that link drive-bys to listing photos, price, and virtual tours 24/7.
- [QR code for dental clinic](https://qrlagoon.com/en/qr-code-for-dental-clinic): QR codes for clinics and medical offices so patients self-book from the waiting room. No PHI passes through QRLagoon.
- [QR code for salon](https://qrlagoon.com/en/qr-code-for-salon): QR codes for salons and barbershops — mirror stickers and cards that let clients self-book (Booksy, Square, Fresha).

## Frequently asked questions

### What is the difference between a static and a dynamic QR code?

A static QR code encodes the destination directly, so it works forever but cannot be changed without reprinting. A dynamic QR code encodes a short link that redirects through QRLagoon, so you can edit the destination at any time and the printed code keeps working. Only dynamic codes produce scan analytics.

### Do I need an account?

No account is needed for static QR codes and the print-ready PDF posters — they are generated right in your browser. An account is required for dynamic QR codes, scan analytics, and editable destinations.

### How does QRLagoon protect scan privacy?

Scan IP addresses are hashed with SHA-256 using a salt that rotates every 24 hours, so unique scans can be counted without storing identifiable addresses; after the salt rotates the hash cannot be reversed even by QRLagoon. Country/city enrichment uses a local MaxMind GeoLite2 database (the IP never leaves the server). There is no GPS collection and no third-party trackers (no Google Analytics, Facebook Pixel, Hotjar, etc.).

### What can I see in scan analytics?

Scans broken down by day, hour, country, city, device type (mobile/tablet/desktop), operating system, and browser, plus unique-scan counts and A/B variant breakdowns. Analytics export to CSV. Retention depends on your plan.

### Can I customise how the QR code looks?

Yes — custom foreground/background colours, colour presets, dot styles (square, rounded, dots, classy, extra-rounded), and an optional logo (PNG/JPEG/SVG/WebP up to 1 MB). You can also generate artistic AI QR codes with Stable Diffusion + ControlNet on paid plans.

### What are PDF posters?

Print-ready A4 (300 DPI) posters that embed your QR code with a headline and call-to-action — for example "Scan to view our menu" or "Scan to leave a review". Templates exist for restaurants, Google reviews, dental/medical, salons, real estate, Wi-Fi, and tip jars, plus a fully custom template.

### Can I route scans differently by country, device, or time?

Yes. Smart redirect rules send scans to different URLs based on country, device, or local-time schedule; the first matching rule wins. You can also run A/B tests that split traffic across up to 10 destination URLs by weight.

### Is there an API?

Yes. Paid plans can create API keys and manage QR codes programmatically, and webhooks deliver a signed (HMAC-SHA256) POST whenever a QR code is scanned — useful for Slack, a CRM, or n8n/Zapier automations.

### How do refunds work?

A first paid subscription can be refunded in full within 14 days for any reason, self-service from the Billing page. Other cases (renewals, partial periods, older payments) are reviewed manually. Paddle is the merchant of record and issues the refund to your original payment method.

### Will people need an app to scan?

No. Every modern phone camera (iOS 11+, Android 8+) reads QR codes natively — point the camera and tap the link.

## Languages and URLs

The site is available in English (`/en/…`) and Ukrainian (`/uk/…`). URLs are locale-prefixed and the English surface is the canonical (x-default) version. The links in this document use the English locale; swap the `/en/` prefix for `/uk/` for the Ukrainian equivalent.

Key pages:

- [QRLagoon home](https://qrlagoon.com/en): Product overview: dynamic (editable) QR codes, privacy-friendly scan analytics, and branded PDF posters for offline marketing.
- [Free QR code generator](https://qrlagoon.com/en/qr-code-generator): Generate static QR codes (URL, text, email, phone, SMS, Wi-Fi, vCard) with custom colors, logo, and dot styles. PNG/SVG export, no signup.
- [Google Review QR code generator](https://qrlagoon.com/en/google-review-qr-code-generator): Create a QR code that sends customers straight to your Google review page, with a printable A4 PDF poster. No signup required.
- [Pricing](https://qrlagoon.com/en/pricing): Free plan (unlimited static QR + 3 dynamic QR, 7-day analytics). Paid Pro and Agency plans from $9/mo add longer retention, custom domains, team seats, client portals, and API access.
- [Security & privacy practices](https://qrlagoon.com/en/security): How scans are tracked: IP addresses hashed with SHA-256 and a daily-rotated salt, local MaxMind GeoIP (no third-party leak), no GPS, no third-party trackers, HTTPS + HSTS.
- [Privacy Policy](https://qrlagoon.com/en/privacy): What data is collected on scan and signup, retention windows, subprocessors, and GDPR/CCPA rights.
- [Terms of Service](https://qrlagoon.com/en/terms): Acceptable use, billing, refunds, content ownership, and liability.
- [Refund Policy](https://qrlagoon.com/en/refunds): 14-day self-service refund window on a first payment, plus manual reviews for other cases.
- [Contact](https://qrlagoon.com/en/contact): Routing for support, billing, privacy, legal, security, and abuse inboxes.
- [Report a QR code](https://qrlagoon.com/en/abuse): Report a QRLagoon short link used for malware, phishing, illegal content, or copyright violations.
- [System status](https://qrlagoon.com/en/status): Live health checks for the QRLagoon API and database.

## Contact

Reach the right inbox via https://qrlagoon.com/en/contact: general support, billing and refunds, privacy and data rights, legal, security, and abuse. Malicious QR codes (malware, phishing, illegal content, copyright) can be reported at https://qrlagoon.com/en/abuse. QRLagoon is operated from the EU.