Scan Any QR. Know It's Safe.

Point your camera at any QR code and get an instant threat report. Free, fast, private.

Your Security Overview

Total Scans
47

scans completed

Threats Blocked
3

kept you safe

You're Protected

BelQR uses six client-side risk signals before you ever tap a link. Results are heuristic and run locally in your browser.

Instant QR Threat Scanner

Every QR code is scored locally for suspicious patterns, risky redirects, and deceptive domains.

Scan Model
6 signals
HTTPS Brand Match Hostname Shape Redirect Risk Query Params Unicode Domain
QR Camera Scanner
Point your camera at any QR code — BelQR checks it for threats before opening.
What happens when you tap Enable Camera
1.Your browser asks for camera permission once.
2.Camera feed stays on-device — never uploaded.
3.QR decoded instantly. Safe = auto-opens in Secure Browser.
No camera?
Or paste a URL to scan
Get the BelQR Chrome extension — free
Right-click any QR image on any page → instant safety verdict. Right-click any link → BelQR's local heuristic checks it before you tap. No tracking, no upload.
Install ↗
11 /100
Threat Detected HIGH RISK
This URL failed multiple security checks
http://suspicious-bank-login.xyz/secure/verify?token=abc123
Local heuristic flagged this URL — see reasons below. No upload, no third-party engine.
Why this was flagged Local heuristic · in-browser · no upload
  • Reasons appear here after a scan.
BelQR uses one in-browser heuristic engine that checks for HTTPS, raw IPs, suspicious keywords, URL shorteners, excessive subdomains, Unicode homograph spoofing, high-risk TLDs, brand impersonation in the hostname, URL length, dangerous schemes, and sensitive query parameters. We do not query any third-party reputation API.
Alert in:
⚠️ Scan-safety check
Before you scan, ask: is this QR safe?
Drop any QR image or paste any URL. We score it locally — no upload, no tracking, no account. Get a green / red verdict in 2 seconds, plus a shareable card.

…or generate your own QR code

18 types · custom colors · instant download · no sign-up · 100% client-side

Encoded Data
URL

Safe URL Preview

Score any URL with a local in-browser heuristic before clicking, then preview the page in a sandboxed iframe. No cookies, no login state, no third-party reputation API. Many large sites refuse iframing; use "Open externally" for those.

Right-click-to-check on every page → get the free Chrome extension ↗
0
Blocked
0
Safe
Quick Access
Search Safely
🔗
Generate QR codes with a built-in safety layer
Every URL QR from belqr.com routes through a verification page before reaching its destination.
📖 QR KNOWLEDGE HUB

Everything QR Codes

Guides, security deep dives, industry trends, how-tos, and India-specific QR code insights — articles.

ℹ️ ABOUT

About BelQR

The free QR code platform built around security, privacy, and simplicity.

🎯 Our Mission

BelQR exists to make QR codes safe for everyone. We saw a gap: QR generators were everywhere, but none of them told you where a QR code actually leads before you open it. So we built one that does.

Every QR code generated on BelQR is designed to be transparent, traceable, and trustworthy. Every QR scan on BelQR passes through a security layer that checks for phishing, malware, and suspicious redirects — before your browser ever loads the page.

🛠️ What BelQR Offers

🔗
QR Generator
14 content types — URL, WiFi, UPI, vCard, WhatsApp, Crypto, and more. Free, no sign-up.
🛡️
Security Scanner
Scan any QR code and get a client-side risk analysis before visiting the URL. Powered by on-device heuristic scoring and URL inspection.
🌐
Safe Browser
Browse QR destinations in a sandboxed viewer with domain reputation checks and redirect tracking.
📖
Knowledge Hub
218+ in-depth articles on QR security, usage guides, industry trends, and India-specific insights.

✍️ Editorial Standards

All articles on BelQR are researched and written by our editorial team with expertise in cybersecurity, digital payments, and technology. We follow a strict editorial process:

  • Every article cites real, verifiable external sources (ISO standards, government bodies, security research firms)
  • Technical claims are reviewed against current standards before publication
  • India-specific content reflects actual government schemes (PM-KISAN, ABHA, UPI/NPCI) and real market data
  • Articles are updated when underlying standards or statistics change

Content on BelQR is original and written for educational purposes. It is not licensed for republication without permission.

🔒 Privacy-First Platform

BelQR is 100% client-side. We do not operate a backend server. Your QR data, scan history, and browsing activity never leave your device. We display Google AdSense advertisements to keep the service free — Google may set cookies per their Privacy Policy. You can opt out at any time via our cookie consent controls.

📬 Contact Us

We welcome feedback, bug reports, content corrections, and partnership enquiries.

📧
General & editorial
contact@belqr.com
🔐
Security disclosures
contact@belqr.com
🌐
Security policy
/.well-known/security.txt

📋 Terms of Use

Effective date: 1 April 2026

By using BelQR you agree to these terms. BelQR is provided as-is, free of charge, for personal and business use.

  • Permitted use: Generate QR codes for lawful purposes. Scan QR codes to verify safety. Read our blog for educational purposes.
  • Prohibited use: Do not use BelQR to generate QR codes that link to phishing pages, malware, illegal content, or deceptive material.
  • No warranty: Security analysis is best-effort. BelQR does not guarantee detection of all threats. Always exercise independent judgement before scanning unknown QR codes.
  • Intellectual property: BelQR content, design, and code are copyright © 2026 BelQR. QR Code is a registered trademark of Denso Wave Inc. BelQR is not affiliated with Denso Wave.
  • Governing law: These terms are governed by the laws of India.

Questions about these terms? Email contact@belqr.com

🔒 LEGAL

Privacy Policy & Data Protection

Effective date: 4 April 2026  ·  Version 1.0

Our Core Commitment
BelQR is a fully client-side, zero-server platform. All QR generation, scanning, and URL threat analysis happens entirely inside your browser. We do not operate any backend server that processes your data. The printed QR codes you download encode exactly the payload you typed — no wrapper, no redirect through belqr.com — unless you explicitly enable the optional "Route through BelQR safety check" toggle for URL-type QRs (off by default; see Section 6). To keep BelQR free, blog pages display ads via Google AdSense — Google may use cookies to personalise these ads.
Contents
1. Who We Are 7. Chrome Extension 2. Data We Do NOT Collect 8. Third-Party Libraries 3. Data Stored Locally 9. Camera Access 4. Disclaimer of Liability 10. Your Rights 5. Security 11. Policy Changes 6. Cookies & Tracking 12. Contact
1

Who We Are

BelQR (belqr.com) is a browser-based QR code security platform. The platform provides QR code generation, QR code scanning, URL threat analysis, and a secure browser preview tool.

BelQR is operated as a standalone static web application. There is no registered company entity, no data processing officer, and no server-side infrastructure that handles personal data. All functionality executes locally in your browser.

For any privacy-related enquiries, contact: contact@belqr.com

2

Data We Do NOT Collect

The following data is never collected, transmitted, or stored on any server by BelQR:

QR content you generate — URLs, Wi-Fi passwords, contact details, UPI IDs, crypto addresses, and all other QR data are processed locally and never sent to our servers.
URLs you scan or check — Threat analysis runs entirely in your browser using local logic. Scanned URLs are not transmitted to any external API or server.
Camera feed or images — Camera access is used solely to read QR codes in real time. No frames, images, or video are recorded, stored, or transmitted.
Personal identifiers — We collect no name, email address, phone number, IP address, device fingerprint, or account information. No registration or login is required.
Behavioural analytics by BelQR — BelQR itself deploys no page-view tracking, session recording, heatmaps, or analytics. Note: Google AdSense (our ad partner) may use cookies and device identifiers to measure ad performance — see Section 6.
Payment information — BelQR is free to use and does not process any payment data.
3

Data Stored Locally on Your Device

BelQR uses your browser's localStorage to save convenience data between sessions. This data never leaves your device and is not accessible to us. It includes:

Scan History The last 20 URLs you scanned or checked. Stored with Safe/Risk verdict and timestamp. Displayed in your browser only. You can clear this at any time.
Browser History Up to 50 URLs visited through the Safe Browser. Stored for convenience navigation. Clearable via the Safe Browser history panel.
Bookmarks URLs you star in the Safe Browser. Stored as URL and page title. Removable individually or cleared in bulk.
Extension The Chrome Extension stores your last 50 link-check results in chrome.storage.local — local to your browser profile, inaccessible to us.
Cookie consent One localStorage key belqr_cookie_consent stores your choice (accepted / non-personalised) so we don't ask again on every visit.
Session UI hints Small per-tab counters in sessionStorage (welcome / returning shown? QR-gen count this session?) so the in-app coach doesn't repeat itself. Cleared when you close the tab.
How to delete all local data: Open your browser DevTools → Application → Local Storage → belqr.com → delete all keys. Or use the one-click button below.
4

Disclaimer of Liability

Please read this section carefully. By using BelQR, you agree to the following limitations of liability.

4.1 No Warranty on Threat Detection

BelQR's URL threat analysis is a heuristic, client-side scoring system. It analyses signals including HTTPS status, suspicious keywords, domain structure, TLD reputation, brand impersonation patterns, and URL parameters. It does not query live threat databases or any external intelligence feed in real time. It will not detect every malicious URL. A "Safe" result from BelQR does not constitute a guarantee that a URL is free from malware, phishing, fraud, or other harm.

4.2 No Responsibility for Content at Scanned URLs

BelQR does not control, monitor, or take responsibility for the content of any URL you scan, generate a QR code for, or open through the Safe Browser. You assume full responsibility for any action taken based on a BelQR scan result. We expressly disclaim liability for any financial loss, data loss, identity theft, or other harm arising from visiting a URL assessed by BelQR — whether that assessment was "safe" or "risky".

4.3 No Responsibility for Your Local Data

Data stored in your browser's localStorage (scan history, browser history, bookmarks) is stored on your device. BelQR has no access to this data, cannot back it up, cannot recover it if lost, and is not responsible for its security on your device. If your device or browser profile is compromised, this data may be accessible to third parties. We accept no liability for the exposure of locally stored data.

4.4 QR Codes You Generate

You are solely responsible for the content encoded in QR codes you create using BelQR. BelQR does not review, moderate, or retain any QR data you generate. If you generate a QR code encoding harmful, illegal, or misleading content, BelQR bears no responsibility for the consequences of its distribution or scanning.

4.5 Platform Availability

BelQR is provided "as is" and "as available." We make no guarantee of uptime, accuracy, or fitness for any particular purpose. We reserve the right to modify, suspend, or discontinue the platform at any time without notice.

4.6 Limitation of Liability

To the maximum extent permitted by applicable law, BelQR and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including but not limited to loss of data, loss of profits, or loss of goodwill — arising out of or related to your use of the platform, even if advised of the possibility of such damages.

5

Security Practices

Because BelQR has no server-side data processing, the traditional server-security concerns (database breaches, API key leaks, account takeover) do not apply. The security model is limited to client-side concerns:

  • HTTPS delivery — The platform is served exclusively over HTTPS with HSTS headers, protecting against network interception.
  • Content Security Policy — Security headers block injection attacks and limit script execution to trusted sources.
  • Minimal third-party footprint — BelQR loads no analytics scripts, social SDKs, or advertising pixels beyond Google AdSense (see Section 6). AdSense is loaded only after cookie consent where required by law.
  • XSS protections — All user-controlled data is handled via DOM textContent, never injected into innerHTML. URL scheme validation blocks javascript: and data: URIs from executing.
  • localStorage isolation — Browser security ensures localStorage data is only accessible to belqr.com and is not shared with any other domain.
6

Cookies & Advertising

First-party cookies: BelQR does not set any first-party cookies. The only browser storage BelQR uses is localStorage for functional data (scan history, bookmarks) as described in Section 3.

Google AdSense — Third-Party Advertising Cookies

BelQR uses Google AdSense to display advertisements. Google, as a third-party vendor, uses cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this website and other websites across the internet.

Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to BelQR and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings or by visiting aboutads.info.

For more information on how Google uses data when you use partner sites, see: How Google uses information from sites that use our services.

Cookie type Third-party (Google AdSense / DoubleClick)
Purpose Ad personalisation, frequency capping, fraud prevention, conversion measurement
Opt-out Google Ads Settings · NAI opt-out · your browser's cookie controls
BelQR itself Does not use Google Analytics, Facebook Pixel, Hotjar, Mixpanel, or any analytics/tracking service beyond AdSense

EEA, UK, and Swiss visitors: our cookie consent banner allows you to accept or decline personalised advertising before any AdSense cookies are loaded. Declining will result in non-personalised ads only.

7

Chrome Extension

The BelQR Chrome Extension requests the following permissions and uses them solely as described:

activeTab Reads the URL of your current tab to pre-fill the QR generator. Only accessed when you click the extension icon.
contextMenus Adds right-click options for checking link safety, decoding QR images, and generating QR codes for the current page.
storage Saves your last 50 link-check results locally in chrome.storage.local. This data stays on your device and is never transmitted.
clipboardWrite Allows copying a generated QR code image to your clipboard when you click "Copy".
notifications Displays a Chrome notification when a QR code is decoded from an image via right-click, showing the decoded result.
<all_urls> Required for the content script to inject the QR-decode overlay on any page where you right-click an image. The extension reads no page content except the specific image you right-click.

The extension does not read your browsing history, does not send any data to external servers, and does not collect any personal information.

8

Third-Party Libraries

BelQR loads the following open-source libraries from public CDNs. These CDNs may log your IP address and browser headers as part of normal CDN operation — this is outside BelQR's control:

qrcode-generator v1.4.4 — QR code generation (client-side canvas rendering). MIT licence. No network calls made by the library.
jsQR v1.4.0 — QR code decoding from camera frames and images. Apache 2.0 licence. No network calls made by the library.
Tailwind CSS Loaded via CDN for utility styling. MIT licence. No personal data is processed by this library.

The Chrome Extension bundles qrcode-generator and jsQR locally — no CDN requests are made by the extension.

9

Camera Access

The QR Scanner feature requests access to your device camera using the browser's getUserMedia API. Camera access is used for one purpose only: reading QR codes in real time.

  • No video or images from your camera are recorded, stored, uploaded, or transmitted.
  • Camera access is immediately released when you navigate away from the Scan page.
  • You can deny camera access — the manual URL input and image upload features are available as alternatives.
  • Camera permission is controlled entirely by your browser and operating system. BelQR cannot access your camera without explicit browser-level permission.
10

Your Rights

Because BelQR does not collect or store personal data on any server, most data subject rights under GDPR, CCPA, and similar regulations are automatically satisfied — there is no personal data held by us to access, correct, port, or delete.

Data stored in your browser (localStorage) is entirely under your control. You can view, modify, or delete it at any time through your browser's developer tools or site data settings.

If you believe BelQR has collected your personal data in a way not described in this policy, contact contact@belqr.com and we will investigate and respond within 30 days.

11

Changes to This Policy

We may update this Privacy Policy to reflect changes in the platform's functionality, applicable laws, or operational practices. The effective date at the top of this page will be updated when changes are made.

Because we collect no contact information, we cannot notify you of changes by email. We recommend checking this page periodically. Continued use of BelQR after a policy update constitutes acceptance of the updated terms.

12

Contact

For any questions, concerns, or requests related to this Privacy Policy or BelQR's data practices, contact us at:

contact@belqr.com

We aim to respond to all privacy enquiries within 30 calendar days.

BelQR
Taking you to
sec
Advertisement
QR powered by BelQR · Privacy
✉️ CONTACT

Contact BelQR

Real humans, plain email. We reply to every legitimate message.

💬
General & Support
hello@belqr.com
Questions, bug reports, feature requests, partnerships.
🛡️
Security Disclosure
security@belqr.com
Vulnerability reports. We coordinate disclosure responsibly.
📰
Press & Media
press@belqr.com
Interviews, comment on QR security incidents, media kit.
Response time

We reply to security disclosures within 48 hours, general support within 5 working days. We do not run a ticketing system or chatbot — you get a real human reply on email.

A few things we can't help with by email:
  • Recovering scans — BelQR is client-side, we have no record of what you scanned.
  • Decoding a QR code from a screenshot — use the scanner page; uploads stay on your device.
  • Removing a third-party site flagged by the safe-browser heuristics — the score is computed locally, we don't host a blocklist.
About BelQR · Privacy Policy · Terms of Use
📜 LEGAL

Terms of Use

Plain English, no fine print games. Last updated: 26 May 2026.

1. Acceptance

By using BelQR (belqr.com, the Chrome extension, and any subdomains we operate) you agree to these terms. If you don't agree, please don't use the service. We may update these terms; material changes will be reflected by the "last updated" date above.

2. What BelQR is (and isn't)

BelQR is a free, client-side QR code generator, scanner and safe-browser. Everything you generate or scan stays on your device unless you explicitly share it.

BelQR is not a security guarantee. The safe-browser heuristic score is a best-effort signal — it can miss real threats and flag harmless URLs. Don't rely on it as your sole defence.

3. Acceptable use

You agree not to use BelQR to:

  • Generate QR codes that encode malicious URLs, phishing links, malware payloads, or content that violates someone else's rights.
  • Scrape, automate, or proxy the tool to bypass per-browser usage in ways that degrade service for other users.
  • Attempt to bypass our safe-browser heuristic to deliver harmful content to people who scan your QR codes.
  • Reverse engineer or remove the privacy posture (the client-side commitment) and redistribute as your own service.

4. Your content

You own what you put in — the URLs, vCards, WiFi credentials, UPI handles, and other content you encode into QR codes. Because BelQR is client-side, that content does not leave your device, so we make no claim over it and we cannot retrieve it for you if you lose it.

5. Disclaimers

BelQR is provided as-is, without warranty of any kind, express or implied. We do not warrant that the service will be uninterrupted, error-free, or that any QR code you generate or scan will be perfectly readable on every device.

Third-party links shown via the safe-browser or in blog references are not under our control. Visit them at your own discretion.

6. Limitation of liability

To the maximum extent permitted by law, BelQR and its operators are not liable for any indirect, incidental, consequential, or special damages arising from your use of the service. Our total liability for any direct claim is limited to the amount you paid to use BelQR (which is zero).

7. Governing law

These terms are governed by the laws of India. Any disputes that cannot be resolved over plain email will be subject to the exclusive jurisdiction of the courts at Hyderabad, Telangana.

8. Contact

Questions about these terms? Email hello@belqr.com. For security disclosures, use security@belqr.com.

About BelQR · Privacy Policy · Contact