Last updated: July 2026
Security on a no-signup tool is a different shape than on a typical SaaS product — there's no password database to breach because there's no password in the first place. Here's exactly what ShortQR does to protect the data that does exist, and how to report an issue if you find one.
Our Approach
ShortQR is a no-signup service — we don't ask for a password or store account credentials, which limits the type of data there is to protect. The site is served over HTTPS to protect data in transit between your browser and our servers.
What We Protect
- Data in transit: All connections to shortqr.in are encrypted via HTTPS.
- Redirect integrity: Short links redirect exactly to the destination the creator entered — we don't modify or intercept destinations.
- Contact form submissions: Messages sent through the contact form are used only to respond to your request, as described in our Privacy Policy.
- No unnecessary data collection: Because there's no account system, we don't hold a password, saved payment method, or profile tied to your identity.
Reporting a Vulnerability
If you believe you've found a security issue affecting ShortQR, please report it responsibly by emailing support@shortqr.in with enough detail to reproduce the issue. Please avoid actions that could disrupt the Service or affect other users, such as automated scanning at scale or accessing data that isn't yours.
What to Include
- A description of the issue and its potential impact;
- Steps to reproduce it;
- Any relevant screenshots, logs, or proof-of-concept details.
Our Commitment
We'll acknowledge reports we receive and look into them. We ask that you give us a reasonable opportunity to investigate and address a reported issue before disclosing it publicly.
Related Policies
- Privacy Policy — what personal information we collect and how it's used
- Terms & Conditions — rules for using ShortQR
- DMCA Policy — how to report copyright infringement on a linked destination
Frequently Asked Questions — Security
Does ShortQR use HTTPS encryption?
Yes, the entire site is served over HTTPS, which encrypts data in transit between your browser and our servers.
Does ShortQR store my password or account credentials?
No, ShortQR is a no-signup service, so there's no password or account credential stored for you in the first place.
How do I report a security vulnerability to ShortQR?
Email support@shortqr.in with a description of the issue, steps to reproduce it, and any relevant screenshots or proof-of-concept details.
Does ShortQR offer a bug bounty program?
ShortQR doesn't currently run a paid bug bounty program, but we acknowledge and investigate every responsibly reported vulnerability.
What should I avoid when testing ShortQR for vulnerabilities?
Avoid actions that could disrupt the service or affect other users, such as automated scanning at scale or accessing data that isn't yours, while investigating a potential issue.
Found an issue? Email support@shortqr.in — we review every report.