QRForge is built to collect as little as possible.
Your list of "my QR codes" and their edit keys are kept in this browser's localStorage only, never uploaded anywhere as a profile. Clearing your browser data removes this list (your QR codes still work — you'd just need their edit keys again to manage them).
QRForge does not use Google Analytics, Facebook Pixel, or any third-party advertising tracker. If usage analytics are ever added, they will be optional and privacy-friendly (aggregate counts, no individual profiling).
When someone scans a QR and is redirected, the request necessarily passes through Cloudflare's network (as with any website) — see Cloudflare's own privacy policy for how they handle request logs at the infrastructure level. QRForge's own code does not log who scanned what.
The Scan & Edit page requests camera access only when you click "Start camera," purely to decode the QR code locally in your browser. No video or image is ever uploaded.