Nothing in your CSV is uploaded.

Generation happens in the browser tab. We do not provide accounts, hosted redirects, destination checks, or scan tracking.

What the tool handles

The CSV text you paste and the generated ZIP are processed in browser memory. Q17 does not upload or persist them. When you choose to download the ZIP, that downloaded file and its payload manifest remain on your device until you delete them. Do not place secrets in QR codes: anyone who scans a code can read its payload.

Optional Google Analytics measurement

Google Analytics is the only measurement this site uses. There is no first-party collector; an earlier build had one and it has been removed. When an exact BulkQR Local Google Analytics stream is configured, the page loads Google Analytics on every visit, and what it keeps on your device depends on where you are. In the European Economic Area, the UK and Switzerland nothing is stored or read until you say so: a cookie banner asks, and until you accept there is no analytics cookie and no local storage entry of Google's. Everywhere else consent is not required for it and a first-party analytics cookie is set on bulkqr.scopir.com alone without asking. Either way the cookie is fixed to 90 days from its first write, is not shared with sibling sites, and advertising storage stays denied. If you are shown the banner and answer it, your answer is kept in this browser for 180 days so you are not asked again; clearing site data asks again. Anything else this page keeps in your browser is described elsewhere on this page and never leaves it. Two earlier builds were wrong in opposite directions. One asked everyone in the world, which misread a duty owed in those countries and nowhere else. The next asked nobody and denied storage everywhere; that interrupted no one and Google recorded none of the visits, accepting each and discarding it. This asks only where the question is owed. Google may process the sanitized page URL, referrer origin, browser or device signals and network address under its Analytics terms; the page URL this site sends is reduced to the Site origin and the referrer to its origin, and the page sends nothing at all from a route outside its reviewed list.

The event names forwarded are visit, generate_start, generate_success, generate_error, return_visit and higher_limit_interest_click, plus the page view Google's own tag sends on load. Of what the page itself reports, only the event name is forwarded: every Product dimension a page passes — row count, CSV, QR payload, filename, generated output, error detail, CTA surface, elapsed return days and every other — is dropped at that boundary and reaches no provider. This site's own code sends no session or visitor identifier. Google's tag does, where storage is allowed: the first-party cookie described above holds a client identifier, and Google's client and session identifiers accompany each collection request. Where storage is denied — the EEA, the UK and Switzerland — no such cookie is written and nothing identifying you persists on this device between visits. Google receives each collection request either way under its Analytics terms, including your network address. Each event still carries the stream's measurement ID, the page location reduced to the Site origin, the referrer reduced to its origin, and a fixed page title that is this Site's short name. A browser-local day marker can count a return on a later UTC day without leaving the browser. Labeled operator sessions and the daily canary send distinct excluded operational events instead. Google says Analytics automatically excludes known bots to the extent possible; that does not prove every remaining event is a person. Missing Analytics rows remain unavailable rather than proof of zero use. Google describes its partner-site processing at this provider notice. No configured measurement ID means no Google Analytics script or event.

Higher-limit interest email

If you choose to email higher-limit interest, do not attach CSV files or include QR payloads, filenames, secrets, identity documents, or customer data. Your email address and message are handled in the mail system so a human can decide whether the note is a real purchase-intent signal; only redacted, non-sensitive summaries may enter operating records.