Privacy Policy

Last updated 14 August 2026

What we collect

Nothing that identifies you, and nothing you type. This site is a set of static files. When you fill in the form on the "make your page" screen, the text stays in your browser's memory. Pressing the button runs a calculation on your own device that packs those details into a web address. Nothing is transmitted to us, because there is no "us" to transmit to — no server, no database, no logs of our own.

Your details live in the part of the link after the # symbol. By the design of the web, browsers never send that part to any server. It is read only by the page running on the device of whoever opens your link.

The same is true of the extras. Your QR code is drawn on your own device, not fetched from a QR service. Pasting a link back in to change your details decodes it in your browser and produces a new link; it does not reach us, and it does not alter the link you already shared.

What this means for you

• We cannot see your name, phone number or bank details. We never receive them.
• We cannot email you, because we have no email address of yours.
• We cannot delete your page for you, and we cannot recover it if you lose the link. There is nothing on our side to delete or recover.
• We have nothing that could be leaked in a breach, sold, or handed over on request.

Your link is public to anyone who has it

This is the trade-off that comes with storing nothing. Your link contains your payment details in an encoded form. Encoded is not encrypted — anyone holding the link can read what is in it. Treat it exactly as you would treat the phone number or account number itself: share it where you are happy for people to see those details, which is the point of the page.

Anyone can also make a page with any name on it, including yours, and point it at their own account. We have no way to prevent or detect that. Only share links you generated yourself, and be careful with a link claiming to be someone else's.

Third parties, honestly

We store nothing about you, but this site is not a sealed box. Four things reach outside it, and you should know about them:

• Google Tag Manager and Google Analytics. Google receives a record that a page was opened, along with your IP address, device and browser details, and sets cookies to recognise repeat visits. These load only on the home page and the generator, never on pages showing payment details. See the section below.
• Our host. These pages are served by a static hosting provider. Like any web host, it may keep standard technical logs, including your IP address. That is the host's processing, not ours, and we do not read those logs.
• Fonts. The pages load typefaces from Google Fonts, so Google receives your IP address when a page loads. We do not send them anything else, and we get nothing back.
• Your QR image. If a creator added a QR image hosted elsewhere, the visitor's browser fetches it from that host, which will see their IP address. We set the page to withhold the referring address, so that host is not told which page requested it.

If you choose to shorten your link with a service such as TinyURL, that is a separate company with its own policy, and your details will be stored on their servers. That choice is yours and happens entirely on their site.

Cookies and analytics

We use Google Tag Manager, which loads Google Analytics, to see how many people visit and how many links get made. It sets cookies in your browser and sends Google your IP address, along with details about your device and browser. Google processes that data on its own servers, which are outside Nepal, under its own privacy policy and for its own purposes as well as ours.

We do not run advertising, and we do not sell or share anything with anyone else.

One limit is worth stating plainly, because it is the reason this section is short. Analytics runs only on the home page and the "make your page" screen. It is deliberately switched off on the pages that display someone's payment details, because those details sit in the web address and Google Analytics reports the full address of every page it runs on. Leaving it on there would hand your phone and bank number to Google, which is exactly what this design exists to prevent.

The "links made" figure counts only that the button was pressed. We never learn who made a link, what was in it, or where it went.

If you would rather not be counted, any browser content blocker will stop it, as will Google's own opt-out add-on. Nothing on this site stops working if you block it.

Children

This tool is meant for adults who can hold a bank or wallet account in their own name.

Changes

If this policy changes, the date at the top changes with it. Since we hold no contact details, we cannot notify you — check back if it matters to you.

Contact

Questions about this policy can go to the maintainer at vijaykarn.com.np. Please do not send payment details or personal information — there is nowhere to store them, and nothing needs them.