CandorQR Acceptable Use Policy

Last updated: 19 October 2026

QR codes are trusted by the people who scan them. To protect them, you must not use CandorQR (candorqr.com) for:

Phishing or “quishing”: pages that imitate another organisation, collect credentials or payment details by deception, or fake parking, delivery or invoice payment pages.
Malware, unwanted software, drive-by downloads or exploit kits.
Fraud and scams: fake giveaways, investment or crypto scams, fake shops or advance-fee schemes.
Cloaking: chaining through link shorteners or other redirectors to hide the final destination, or changing a destination to something harmful after review.
Restricted countries: don't use the Service from, or for the benefit of anyone in, a restricted country or region (see Terms, section 7), and don't use VPNs or false details to get around this.
Illegal content, child sexual abuse material, non-consensual intimate imagery, terrorism or violent extremism, harassment, or content that infringes intellectual property rights.
Spam, or selling traffic or engagement.
Tracking people without their consent, IP loggers, or collecting sensitive data unlawfully.
Trying to bypass plan limits, rate limits or our security checks, or reselling the redirect service without permission.

How we enforce this

Every dynamic destination is checked against Google Safe Browsing / Web Risk and our blocklist when it is created or edited, and again periodically.
Anyone can report a code at /report. Anyone can see where a short link goes by adding /preview to it.
We may disable codes and suspend accounts immediately, without refund where the violation is serious, and may report illegal activity to the authorities.