Cookie notice

Cookies set right now

Two, both belonging to Google Analytics: _ga and _ga_1ZM7W7N0LS. Each holds a randomly generated number that lets Analytics tell a returning visitor from a new one. They are first-party cookies, set on this domain, and they expire two years after your last visit.

The generator itself still stores nothing. It has no reason to remember anything between visits, so it sets no cookie of its own, writes nothing to local storage and keeps no session identifier.

You can confirm both statements yourself: open your browser's developer tools and look at the Application or Storage tab. Two cookies, both starting _ga, and nothing else.

Third-party requests

One: the Google Analytics tag, loaded from googletagmanager.com, which then reports to Google's analytics servers. Everything else — every stylesheet, script, font and image this site uses — is still served from this domain. There is no content delivery network and no font service.

What that request carries is the address of the page you are on, the page you arrived from, a rough location derived from your IP address, and your device and browser type. It does not carry anything you type into the generator, because the generator never sends what you type anywhere.

What will change with advertising

This tool is intended to be supported by advertising. When that is enabled, Google and its advertising partners will set cookies used to serve ads, limit how often you see the same ad, and measure performance. Some of those cookies are used for personalised advertising, which depends on your settings and your location.

That is not happening yet. This notice will be updated, and a consent mechanism added where the law requires one, before any ad code runs — not afterwards.

Controlling cookies

Every major browser lets you block or delete cookies, including third-party cookies specifically, in its privacy settings. Blocking them will not stop the QR generator working, because it does not depend on them.

For analytics specifically, Google publishes a browser opt-out add-on that stops Analytics collecting anything from you, on this site and on every other one that uses it.

For advertising specifically, Google My Ad Center lets you turn off ad personalisation across Google's network. In the EEA and the UK you can also withdraw consent at any time through the consent banner once it exists.