Acceptable use policy

People scan QR codes on trust: they can’t see where a code leads until they’ve scanned it. This policy protects them, and it’s part of our terms of service.

1. What’s not allowed

You may not use QRStitch to create, host or link to:

• Phishing and scams: fake login, payment, delivery, bank or government pages, or anything designed to trick people into giving away passwords, OTPs, card details or money.
• Malware: viruses, spyware, unwanted software, or downloads that hide what they are.
• Deceptive redirects: codes that impersonate another business, hide their destination behind chains of link shorteners, or show different content to our safety checks than to real people.
• Illegal goods and services: drugs, weapons, counterfeit goods, stolen data, or anything else that is illegal where you or your audience are.
• Content that exploits children, in any form. We report it to the authorities.
• Hate, harassment and violence: content that promotes violence, or attacks people for who they are.
• Non-consensual intimate content, or other content that violates someone’s privacy.
• Spam: unsolicited bulk messages, or codes placed on other people’s property without permission, such as stickers pasted over a shop’s payment code.
• Infringing content: material that violates copyright, trademarks or other rights.

2. Using the service fairly

• Don’t try to break, overload, scrape or get around the limits and security of QRStitch.
• Don’t create several free accounts to avoid plan limits.
• Don’t resell access to your account unless your plan allows it (for example, agency or team plans).

3. How we keep codes safe

• Destinations of dynamic codes are checked against Google Web Risk and our own block list when they’re created or changed, and again regularly afterwards.
• New accounts have sensible limits while we build trust.
• Anyone can report a code, and we review every report.

4. What happens when a code breaks this policy

Depending on how serious it is, we may:

• ask you to change the destination;
• block the code, so people who scan it see a warning page instead of the destination;
• suspend or close the account;
• report illegal activity to the authorities.

Where it’s safe and lawful, we’ll tell you what happened and why, and you can ask us to review the decision by replying to our email.

5. Report an abusive QR code

If a QRStitch code leads somewhere harmful, tell us through the contact page or by email to hello@qrstitch.com with the subject “Abuse report”. Include the short link or a photo of the code, and where you found it. We aim to act on urgent reports, such as phishing and malware, within 24 hours.

Complaints can also be sent to our Grievance Officer, whose details are in the privacy policy.