Privacy Policy

1. Data Controller

GeraCode (www.geracodigo.com.br (abre em nova aba)) is maintained as an independent project. For any privacy-related question or request, the controller can be reached at:

Email for privacy requests: privacidade@geracodigo.com.br (abre em nova aba)

2. Data We Collect

GeraCode was designed with privacy as a first priority. Every tool processes data exclusively in your browser. We do not collect, store, or transmit the following:

• Barcodes or QR codes you generate
• Any values, text, or numbers you enter into a tool
• Camera images while scanning a code
• SKU codes you create
• Personal data such as your name, email, or phone number, except when you send them yourself through the contact form or the mailing list (below)

GeraCode has no signup and no user accounts. The only personal data that reaches a server is what you deliberately type into the two forms described below.

2.1. Contact form

When you send a message through the Contact page, the name, email, subject and message you wrote are sent as an email to the contato@geracodigo.com.br mailbox, hosted by Hostinger, our email provider. We use this data only to reply and follow up on your message. Your email is not added to the mailing list and is not used for anything else. To limit abuse, the sender's IP address is used as a temporary counting key, deleted automatically within 1 hour.

2.2. Mailing list (updates)

The mailing list is optional and currently offered only on the Portuguese version of the site. You join only if you type your email into the "Receber novidades" form and confirm through the link we send right after (double opt-in). Without that click, no other email is sent.

• What we keep: your email, the page where you signed up, the signup and confirmation dates and, as with any email service, whether each email was opened or clicked.
• What for: sending the product catalog spreadsheet template and GeraCode updates, at most one email per month. No third-party offers; the list is never sold or shared.
• Who processes it: Brevo (Sendinblue SAS, France), the service we use to store the list and send the emails.
• How to leave: use the "unsubscribe" link at the bottom of every email, at any time, or write to privacidade@geracodigo.com.br (abre em nova aba). To make sure you get nothing else, the address is kept flagged as unsubscribed; ask at the same address if you prefer full deletion.

To limit abuse, the IP address submitting the form is used as a temporary counting key, deleted automatically within 1 hour. Google Analytics only records that a signup happened and on which page, never the email address.

2.3. Public image API

Exception: public image API. If you use the barcode and QR code API, the value to draw is sent in the URL itself. It passes through the server only to generate the image, is not stored in a database, and is cached on Vercel's delivery network. To limit abuse, the caller's IP address is used as a temporary counting key (per minute and per day), deleted automatically within 2 days. We keep only daily aggregate totals for 90 days (number of images and the referring site's domain, without path or page). The host's technical logs may contain the URL for a short period.

3. Legal Basis for Processing

Where applicable privacy laws (such as the GDPR or CCPA) require a stated legal basis, GeraCode relies on:

• Legitimate interest: analytics cookies (Google Analytics) are enabled by default to collect aggregated, anonymized usage metrics needed to evaluate and improve the site. You have the right to object at any time via the cookie banner or the "Cookie Preferences" link in the footer. We also rely on legitimate interest for local storage (localStorage) of your generation history, which never leaves your device.
• Consent: advertising cookies (Google AdSense) are enabled only after your explicit consent, granted through the cookie banner. Without opt-in, no personalized ads are loaded.
• Consent: the data you send through the contact form and the mailing list. For the mailing list, consent is confirmed through the link sent to your email and can be withdrawn at any time with the "unsubscribe" link.
• Strictly necessary: the Service Worker (caching static files for offline use) is required for the site to function and does not need consent.

4. Local Storage

GeraCode uses your browser's localStorage to save your generation history (up to 30 items). This data stays exclusively on your device and can be deleted at any time via the "Clear all" action in the history panel, or by clearing site data in your browser settings.

localStorage also keeps the last settings you used in each tool (format, size, colors, frame, SKU prefix, label size) so you can reapply them on your next visit. Nothing is sent to a server. The "Forget" button shown next to the suggestion deletes them.

5. Cookies and Tracking Technologies

GeraCode uses Google Consent Mode v2 to manage cookie categories. Analytics cookies (Google Analytics) are enabled by default under legitimate interest; you can disable them at any time via the cookie banner or the "Cookie Preferences" footer link. Advertising cookies (Google AdSense) stay disabled until you give explicit consent.

5.1. Essential cookies (always active)

Required for basic site functionality. Includes the Service Worker for static-file caching and storage of your consent preferences. No personal data is collected.

5.2. Google Analytics (GA4) — legitimate interest, with a right to object

We use Google Analytics 4 to understand, in aggregate and anonymized form, how users interact with the site. This is enabled by default under legitimate interest, and you can object at any time via the cookie banner. GA4 collects anonymized data such as:

• Pages visited and time on page
• Device, browser, and operating system type
• Approximate country/city of origin (not a precise address)
• Interaction events (code generation, download, print)

Google Analytics uses cookies to identify sessions. This data is processed by Google under its own Privacy Policy (abre em nova aba). We never combine Analytics data with personally identifiable information.

5.3. Google AdSense — requires consent

GeraCode may show ads served by Google AdSense to keep the service free. AdSense may use cookies and similar technologies to serve ads relevant to your interests.

You can manage your ad personalization preferences at Google Ads Settings (abre em nova aba).

5.4. Service Worker (PWA)

We use a Service Worker to let the tools work offline. It caches static site files on your device. No personal data is ever stored by the Service Worker.

5.5. Microsoft Clarity — legitimate interest, with right to object

We use Microsoft Clarity to understand how the tools are used: click and scroll heatmaps plus anonymous session recordings (mouse movement, clicks, scrolling and pages visited). It follows the same rule as Google Analytics: enabled by default under legitimate interest, and not loaded at all if you decline analytics cookies in the banner or under "Cookie Preferences."

Clarity masks form fields. On top of that, in the QR code generator (including Wi-Fi QR codes) and the QR code and barcode readers, everything that shows your data is masked in recordings: the generated QR code image, the camera view and scan results. Buttons and error messages stay visible so we can see where a tool gets stuck. Wi-Fi passwords and scanned content are never captured. Data is processed by Microsoft under the Microsoft Privacy Statement (abre em nova aba).

6. International Data Transfers

When you consent to analytics and/or advertising cookies, the data collected by Google Analytics and Google AdSense may be transferred to and processed by Google LLC on servers located in the United States and other countries. Google applies standard contractual clauses and security measures as described in its Privacy Policy (abre em nova aba) and Data Processing Terms (abre em nova aba).

Data collected by Microsoft Clarity is processed by Microsoft Corporation, also on servers in the United States, under the safeguards described in the Microsoft Privacy Statement (abre em nova aba).

Mailing list emails are stored and sent by Brevo (Sendinblue SAS), on servers in the European Union, under Brevo's data processing agreement. Contact form messages are kept in the mailbox hosted by Hostinger.

7. Data Retention

• localStorage (generation history): stays on your device until manually deleted or your browser data is cleared. Maximum 30 items.
• localStorage (last settings): stays on your device until you click "Forget" or clear your browser data. Each new generation replaces the previous record.
• Google Analytics: retained by Google for 14 months (GA4 default), then automatically deleted.
• Microsoft Clarity: session recordings are kept for 30 days; heatmaps and aggregate metrics for up to 13 months.
• Google AdSense: advertising cookies are managed by Google per its own retention policy. You can delete them anytime via your browser settings.
• Consent preferences: stored in browser localStorage indefinitely, revocable anytime via the cookie banner.
• Public image API: per-IP counters are deleted within 2 days; daily aggregate totals in 90 days.
• Contact form: the message stays in the mailbox for as long as needed to reply and follow up; you can ask for deletion at any time. The per-IP counter is deleted within 1 hour.
• Mailing list: for as long as you are subscribed. After you unsubscribe, the address is only kept flagged so it gets no more emails, or deleted if you ask. Signups that are never confirmed are removed. The per-IP counter is deleted within 1 hour.

8. Your Privacy Rights

Depending on where you live, applicable privacy law (such as the GDPR in the EU/UK or the CCPA in California) may give you the following rights over your data:

• Access and confirmation: confirm whether we process your data and access it. Apart from the contact form and the mailing list, GeraCode stores no personal data on servers; your history is local and viewable in your own browser. For contact and mailing list data, write to the privacy email.
• Correction: request correction of incomplete or outdated data. Local data can be edited directly in your browser.
• Deletion: clear your generation history at any time via "Clear all," or by clearing site data in your browser settings.
• Portability: data stored locally can be exported through your own browser. Google Analytics data is anonymized and cannot identify you individually.
• Withdraw consent: revoke consent at any time via the "Cookie Preferences" link in the footer (cookies), or the "unsubscribe" link and the privacy email (mailing list and contact). Withdrawal does not affect processing that already took place.
• Information about data sharing: your analytics and advertising data is shared only with Google LLC and, for Clarity, Microsoft Corporation, as described in sections 5 and 6 of this policy. Mailing list emails are held only by Brevo, and contact messages by Hostinger (section 2).
• Analytics opt-out: install the Google Analytics opt-out browser add-on (abre em nova aba).
• Complaints: if you're not satisfied with our response, you may lodge a complaint with your local data protection authority.

9. Security

GeraCode implements the following security measures:

• HTTPS: all communication is encrypted via TLS/SSL
• Content Security Policy (CSP): restricts script execution to authorized domains
• Google Consent Mode v2: advertising cookies blocked until explicit consent; analytics under legitimate interest with an anytime opt-out
• Local processing: sensitive data never travels over the network
• No signup: no user account is ever created or stored

10. Changes to This Policy

We may update this Privacy Policy at any time. Significant changes will be announced via a notice on the site. Continued use of GeraCode after changes constitutes acceptance of the new policy.

11. Contact

To exercise any of your privacy rights or ask about how we handle your data, contact us at:

• Email: privacidade@geracodigo.com.br (abre em nova aba)
• Response time: we aim to respond within 15 business days.

See also our Terms of Use and About pages for more on GeraCode.