QR Code FAQ: 30 Questions Answered for 2026

A static QR code encodes the destination URL directly into the dot pattern. The pattern cannot be changed without reprinting. A dynamic QR code encodes a short tracking URL (e.g., qrco.de/abc123) which redirects through the QR platform to your real destination. The redirect target can be changed anytime, and scans are logged. Static is free forever and never expires. Dynamic costs money but lets you fix typos in URLs after printing, A/B test landing pages, and see scan analytics. See dynamic QR codes for the full comparison.

Use static + free if: the URL will never change, you do not need scan analytics, you are printing fewer than 50 codes, and the destination has built-in tracking (UTM parameters work for static codes too). Use dynamic + paid if: the URL might change post-print, you need scan-by-time/location data, you need to manage 100+ codes, you need GDPR-compliant scan tracking with consent. Dynamic platforms start at $5-$25/mo (Beaconstac, Uniqode, QR Code Generator, Flowcode). See free QR code generators.

Yes — this is the single biggest hidden risk in dynamic QR codes. If you stop paying, the redirect breaks and printed codes become useless. Bitly, Beaconstac, Flowcode, and Uniqode all let codes expire on plan cancellation. Always export your dynamic-code roster as CSV before any plan downgrade. For permanent installations (gravestones, building signage, vehicle wraps), use STATIC codes with a URL on a domain you own — even if your QR vendor disappears, your URL still works. The tracking disclosure index tracks which platforms expire codes most aggressively.

For laminated menus and table tents, use error correction level M (medium, ~15%) — fits more URL data into the same physical size. For outdoor signage, vinyl wraps, or surfaces likely to scuff, use level Q (quartile, ~25%) or H (high, ~30%). Higher error-correction = denser dot pattern = needs larger physical print. A level-H code at 1 inch square scans reliably with 30% damage; same size at level L (~7%) fails with even minor scuffs. Most QR platforms default to M; explicitly upgrade for outdoor or high-wear surfaces.

Static QR codes track nothing — they encode a URL, the user's phone resolves it, and scan happens client-side. Dynamic QR codes track the redirect: timestamp, IP-derived approximate location (city-level), device type, OS, browser, referrer if any. None of this is PII by US-FTC definition unless combined with other data. EU GDPR considers IP address PII — so dynamic-QR scan tracking on EU campaigns requires lawful basis (legitimate interest is generally defensible for analytics). See QR privacy tracking disclosure index.

Static QR codes that redirect to your own website are GDPR-neutral — the privacy implications belong to the destination site, not the code itself. Dynamic QR codes (Beaconstac, Uniqode, Bitly) collect IP and approximate location at scan, which under GDPR Article 6(1)(f) typically falls under "legitimate interest" for analytics — but the user must be informed (privacy notice on landing page) and have access to data subject rights. The strict reading is that EU campaigns prefer static + first-party analytics. Most platforms publish DPAs (data processing addenda) — sign one before launching EU campaigns.

GS1 Digital Link is a 2022-onwards QR-code standard that encodes a product's GTIN (barcode number) AND a web URL in one code, so the same code works for retail checkout AND consumer engagement. Major retailers (Walmart, Carrefour, Tesco) are adopting GS1 Digital Link for transition off the linear UPC barcode. If you sell physical products through major retail, you will need GS1 Digital Link by 2027 ("Sunrise 2027"). For DTC-only brands, regular QR codes work fine. See QR codes with GS1 support.

Rule of thumb: minimum print size is 10:1 viewing distance. A code scanned from 10 feet away (poster, retail signage) needs to be 1 inch square; from 4 feet (table tent, restaurant menu) 0.4 inches; from 3 feet (business card, brochure) 0.3 inches. Add 30% to the minimum if the surface is glossy (reflections), printed on dark background, or includes a logo overlay (which reduces scannable area). For outdoor billboards scanned from cars at 30 feet, target 3+ inch codes minimum.

Logos in the center are safe up to ~20% of the code area at error-correction level Q or H. Below that, the code stays scannable. Above that, mid-range Android scanners start failing. iOS Camera + Apple QR system tolerates more visual interference than older Android stock cameras. Always scan-test the final printed sample on at least three devices (iPhone, Samsung, mid-tier Android) before mass print. Branded QR codes scan-rate-test 5-12% lower than plain ones — the brand-recognition lift usually outweighs the scan loss. See branded logo QR codes.

Yes — vCard QR codes encode contact info directly (name, phone, email, address, website) so scanning saves it to the phone's contacts without an internet round-trip. Use for printed business cards, conference badges, real-estate yard signs. Limitation: vCard codes are larger and denser than URL codes because the encoded data is bigger; a typical vCard code at 0.4 inches is harder to scan than a URL code the same size. Most QR platforms support vCard generation natively. Static vCard codes work forever offline, which matters for business cards.

Static QR + UTM parameters in the URL is the free approach. Generate a static QR pointing to https://yoursite.com/landing?utm_source=qr&utm_medium=tabletent&utm_campaign=spring2026 and Google Analytics, Plausible, or Umami counts the scans by UTM. Limitations: only counts scans that complete page load (some scans abandon mid-redirect), no scan-time-of-day or location detail beyond what your analytics platform tracks. Free works for 80% of campaigns; pay only when you genuinely need real-time scan dashboards or scan-by-physical-location data.

Free design + low-cost print: generate codes on QR-Code-Monkey (free, static, unlimited), design table tents in Canva (free), print via VistaPrint or GotPrint at ~$0.40 per tent for 4x6 cardstock = $400 total. Add lamination for $200. For dynamic codes (changeable destination), Bitly Free generates 5 codes/month or Uniqode Lite at $5/mo for unlimited. Premium-feel acrylic stands (Etsy, Amazon) add $2-$5/each. Total all-in for 1,000 laminated table tents with stands: $1,400-$2,400.

QR codes win for events because every smartphone (iPhone since iOS 11, Android since 2017) natively scans QR with the camera — no app required. NFC tags require an app or specific OS support and work less reliably on older devices. NFC wins on door-pass speed (tap vs aim+focus). For ticketed events with under-2-second-throughput, NFC. For sign-in sheets, lead capture, and scan-once interactions, QR. Hybrid (QR + NFC) costs 2x but covers all device types. See QR codes for event check-in.

You cannot with a static code (the URL is fixed). With a dynamic code, A/B testing depends on the platform: Beaconstac and Uniqode support split-redirect natively (50/50, configurable). Flowcode supports time-based redirect (URL A 12am-12pm, URL B 12pm-12am). Cheapest free workaround: dynamic code points to a Cloudflare Worker that splits traffic 50/50 to two URLs and logs scan IDs. This is a 30-line script and supports unlimited A/B tests on Cloudflare Free tier (10M requests/mo).

For 3-5 year outdoor durability: high-pressure-laminate (HPL) or aluminum composite (ACM) printed via UV-cured ink. Vinyl decals on PVC last 12-24 months in sun before fading distorts the code. Engraved metal (laser-etched aluminum, brass) lasts 10+ years but costs $30-$80/sign. Outdoor 2D barcodes on weathered vinyl fail scan-rate-tests within 18 months in direct UV. Always specify "outdoor-grade UV-resistant ink" with print vendor. See QR codes with bulk export for managing multi-location signage rosters.

Not in the same code — they encode different data types. Wi-Fi QR codes use the WIFI: schema (WIFI:T:WPA;S:NetworkName;P:password;;); URL codes encode the URL directly. You can print TWO codes side-by-side on the same sign (one for Wi-Fi, one for menu URL). Some advanced platforms (Beaconstac, Uniqode) support a "smart QR" that opens a landing page where users tap to connect Wi-Fi or visit the menu — but this requires internet to reach the landing page first, defeating the offline-Wi-Fi-onboard use case.

Bulk generation is a paid feature on most platforms. Beaconstac Bulk ($199/mo) generates 1,000-50,000 unique codes from CSV upload. Uniqode Pro generates bulk codes with custom destinations. Flowcode bulk requires Pro tier. For free bulk: Python script using the qrcode library generates unlimited unique static codes from a CSV in under 60 seconds. Code: pip install qrcode pillow → loop CSV rows → call qrcode.make(url) → save. Open-source bulk generators (qr-encode, npm-qrcode) handle 10K+ codes in seconds. Skip the paid platform if your codes are static.

Five common ones. (1) Per-scan fees — some platforms cap scans-per-month and charge $0.001-$0.01 per scan over the cap. (2) Custom-domain fees — branded short URLs (qr.yourbrand.com) typically cost $5-$50/mo extra. (3) Code-archive fees — some platforms charge to keep historical codes after deletion. (4) API access fees — bulk-generation API often locked behind enterprise tier. (5) Code-expiration after non-payment — printed codes become dead links. The Q2 2026 QR pricing report tracks all fee categories.

Bitly is link-shortener-first with QR added on top — strong brand recognition, mature analytics, $8-$199/mo. Flowcode is QR-first with floral-pattern aesthetic and AR features — $5-$25/mo entry. Uniqode (rebranded from Beaconstac in 2023) is enterprise-feature-rich with bulk generation and reseller-friendly admin — $5-$199/mo. For pure URL-shortening + QR, Bitly. For QR-as-marketing-channel with built-in landing pages, Flowcode. For multi-location enterprise signage, Uniqode. See Bitly vs Flowcode.

Yes — assign one unique dynamic QR per location (e.g., 50 stores = 50 codes), tag each with the store name in the platform metadata, and roll up scans to a per-location dashboard. Beaconstac and Uniqode both support location-tagged codes natively. Flowcode supports it via custom UTM parameters. Cheapest setup: one Bitly account per region, one code per store, with a custom UTM telling Google Analytics which store generated each scan. For 100+ locations, expect to budget $99-$299/mo on a real platform vs. spreadsheet-managing thousands of free codes.

Static QR codes encoding vCard, plain text, Wi-Fi credentials, calendar events, or SMS templates work entirely offline — the data is in the code itself. Dynamic QR codes require internet to reach the redirect server. URL-encoded static codes require internet on the user's phone to load the destination. Best offline use cases: business-card vCards, conference Wi-Fi passwords, museum exhibit text descriptions, calendar invites for printed materials. Dynamic codes always need connectivity and break in low-signal areas (subways, basements, rural fairgrounds).

PDF-printed-on-laser-paper QR scans best in well-lit indoor settings (high contrast, matte finish, no UV degradation in 6-month timeframes). Vinyl decals scan well on smooth surfaces but lose 5-10% scan rate on textured surfaces (storefront windows with security film, weathered metal). Glossy vinyl reflects light into the camera and reduces scan rate ~15% — always specify matte vinyl for QR codes. Print test: scan from 3 angles (straight, 45°, 60°) on each medium before bulk-ordering.

Yes — TEL: schema for phone, SMSTO: schema for pre-composed SMS, MAILTO: for email with subject and body. Examples: TEL:+15551234567 prompts to call; SMSTO:+15551234567:Hello prompts to send "Hello" to the number; MAILTO:info@example.com?subject=Inquiry pre-fills an email. All of these encode statically and work offline once stored on the code. Restaurant pickup and bulk-text-marketing use cases lean heavily on SMSTO codes. See free QR code generators for tools that generate these schemas.

Black-on-white scans most reliably across all phone cameras. Dark colors (navy, dark green, dark purple) on white work for 95%+ of devices. Light-on-dark (white code on black) works on iOS but fails on some older Android cameras. Avoid red-on-green (color-blind users + camera-contrast issues). Always maintain 70%+ contrast ratio between the code dots and the background. Branded color schemes are fine if the dots remain meaningfully darker than the background — but always scan-test before bulk print.

The code itself never decays — the dot pattern remains scannable forever. The destination URL behind the code is the limiting factor. URLs on your own domain (yoursite.com/menu) last as long as you keep the domain registered. URLs on free services (bit.ly, tinyurl, free dynamic-QR platforms) last as long as the service exists and you keep paying. For 10+ year permanence (gravestones, building plaques, public infrastructure), use static QR codes pointing to URLs on a domain you own and intend to keep paying for indefinitely. See best QR code generators 2026.

A printed QR code cannot be hijacked digitally, but it can be physically replaced — a sticker placed over the original. "Quishing" attacks (QR phishing) involve fraudsters placing fake QR stickers on legitimate signs (parking meters, restaurant tables) that redirect to credential-harvesting sites. Mitigation: tamper-evident decals, custom-domain short URLs that users recognize (qr.yourbrand.com), and quarterly physical audits of installed signage. Train staff and customers to verify the redirect domain after scanning before entering payment info.

Static QR codes are pattern-and-URL pairs — export the URLs as CSV and regenerate static codes on any platform (free or paid). Dynamic codes are platform-locked because the redirect server must continue resolving the short URL. The escape path: export the redirect mappings (short URL → destination URL), set up your own redirect server (a $5/mo VPS + nginx, or a Cloudflare Worker on the free tier), and update DNS to point your custom-domain short URLs to your own server. Then the printed codes keep working forever. See privacy and portability index.

4 modules (4 dots-worth) of clear whitespace on all sides. A 25x25 module code (typical URL with error-correction M) needs at minimum a 33x33 module total area — roughly 30% of the code's width as white border. Without the quiet zone, scanners cannot identify the code's edges and scan-rate drops by 30-50%. Designers regularly violate this rule to fit codes into tight layouts. Always preserve the quiet zone — even at the cost of shrinking the code itself.

No — QR codes need uninterrupted whitespace to scan. Codes printed close together (under 4-module gap) confuse scanners and reduce scan rate sharply. Best practice for multi-offer posters: 4 codes minimum 1 inch apart with labels above each ("Menu," "Wi-Fi," "Reviews," "Loyalty"). Or: use a single QR code that opens a landing page with 4 buttons. The single-code approach scans more reliably (one target, not four) and gives better analytics (one redirect to track) at the cost of one extra tap.

Putting a dynamic QR code on a permanent installation. Restaurants laminate dynamic codes from a $5/mo platform, then forget to renew, and 2,400 menus go dead overnight. Real-estate yard signs use dynamic codes that expire when the listing platform changes pricing models. The fix: for anything printed at scale or installed permanently, use STATIC codes with URLs on YOUR domain. Dynamic codes belong on short-run campaigns (event posters, A/B tests, time-limited promotions) where the cost of a re-print is acceptable.