kod QR you actually own.
Yours. Private. Permanent. Verifiable. Print-safe. No lock-in.
- Sunting selepas cetak. Change the destination of a printed QR any time, no reprint, no re-download, no downtime.
- Never lose a printed code. Every dynamic QR ships with a downloadable static backup, and Keep-Alive preserves the redirect forever from $2/mo, even after you cancel Pro.
- Privacy-safe analytics. Country + device class only. No IP addresses, no user agents, no cookies, no retargeting, ever. Works under GDPR by default.
Built by the team behind Abundera Sign , evidence-first e-signatures with PAdES digital signatures, hash-chained audit trails, and public verification.
Every dynamic code ships with a downloadable static version. Print it alongside the dynamic one; your link keeps working even if we vanish tomorrow.
Stop paying and your codes keep resolving for 90 days. Plenty of time to migrate, reactivate, or downgrade to Keep-Alive.
Downgrade from Pro to preserve printed codes forever. Read-only, tiered to your prior plan, KA-Starter from $3/mo annual ($240 decade, $2/mo effective) up to KA-Enterprise at $149/mo annual. Cara ia berfungsi β
Download your full dataset (codes.csv + scans.csv + README) as a ZIP whenever you want. Also triggers on account deletion. No support ticket, no CSV dump fee.
What you get on Pro
Everything the free tool has, plus a dashboard, analytics, and the infrastructure to run dynamic campaigns at print scale.
Dynamic destinations
Change the URL a printed QR points to, any time. Update a menu, rotate a campaign link, fix a typo on a thousand business cards, no reprint required.
20+ analytics surfaces, pre-computed
Anomaly flags, milestones, cohort retention, weather correlation, local-time heatmaps, scan-velocity tiers, performance-berbanding-target, all derived from the same mengutamakan privasi scan log, no integrations to wire up. See the full list β
Mengutamakan privasi by design
The whole dataset is country + device class. No IP addresses, no raw user agents, no city-level geo, no cookies, no retargeting, ever. Works under GDPR by default. Country buckets under 5 fold into "Other" so individuals can't be re-identified.
Hourly granularity (Team & Agency)
Team and Agency unlock hour-bucket resolution on every chart for up to 7 days back, with 36-month retention, catch the exact moment a campaign went live without ever collecting finer-grained data about the person scanning.
Static backup QR, always
Every dynamic code gets a one-click static backup. Print the static one on the physical object, use the dynamic one for day-to-day. You keep the lock-in escape hatch in your pocket.
REST API (Business+)
Create, edit, and pull analytics for codes via a clean JSON API documented as OpenAPI 3.1. Bearer tokens you control, rate limits you can see in the response headers. Rotate or revoke any key at any time.
Outbound webhook (Business+)
Subscribe a URL to events like code.created, code.updated, anomaly.surge, anomaly.drop, and plan.changed. Stripe-style X-Abundera-Signature with HMAC-SHA256, verify with the same code you use for Stripe.
Multi-seat teams with roles (Team & Agency)
Invite teammates by email. Owner, admin, and member roles. Admins manage codes and invites; members get read-only on team codes + analytics. Business = 12 seats, Team = 30 seats, Agency = 75 seats, Enterprise = 150 seats. Invites expire in 7 days, are revocable, and never reveal secret tokens on-screen.
SSO + SCIM provisioning (Agency + Enterprise)
SAML 2.0 + OIDC sign-in and SCIM 2.0 user & group lifecycle for Okta, Entra, Workspace, JumpCloud, assign a user to the app, they land in your Abundera workspace with the right role; deprovision, they're deactivated with the session invalidated. Group β role mapping with priority; RFC 7643/7644 compliance verified (20/20 on the PingIdentity-derived suite). Per-connection off-by-default flag + 50 RPS rate limit + log audit. See the security page for the compliance posture.
Code groups + public-share tokens
Organize codes into folder-style groups (restaurant locations, client accounts, product lines) and get per-group stats. Flip "public stats" on any code for a signed share URL, auditor-friendly, instantly revocable.
Full customization carried over
Every dynamic code keeps the full QR customization you built in the free tool: type, style, logo, frame, colors, eksport format. Nothing simplifies.
GDPR-ready eksport + delete
Download your complete dataset as a ZIP (codes.csv, scans.csv, README) any time. Permintaan account deletion, we soft-delete immediately and hard-delete after 30 days. No trickery.
Works with the free tool
Saving a code to Pro from qr.abundera.ai is a one-click flow. Everything you've built there round-trips in.
20+ analytics surfaces. One screen. No setup.
Open /stats/ and every panel below is pre-computed for your codes. No connectors, no data warehouse, no event-pipeline plumbing. We derive everything from the same scan log every tier already stores, just country and device class, never IP or user agent.
All panels are part of every paid tier. Hourly resolution and the Team-only feeds unlock on Team + Agency. Public-share tokens let you publish a read-only stats URL per code, auditor-friendly, instantly revocable.
Cara ia berfungsi
The dynamic-QR loop in four steps.
- 1
Build a QR
In the free tool or the Pro dashboard. Style it. Customize. Save.
- 2
Get a short redirect URL
Pro assigns a 7-character shortcode (Base58, no confusable characters). The printable QR encodes
aqr.net/xxxxxxx. - 3
Print it, scan it, edit it
Ship the QR on your packaging, menu, poster, badge. Scans resolve instantly through our edge redirect. Change the destination any time from the dashboard.
- 4
See only what you need
The dashboard shows daily scans, countries, device classes. That's all we store. Your customers' privacy is not your problem.
Soalan yang kerap ditanya
What's an "included scan"? Do you cap them?
Every tier lists the scans per month we include on dynamic codes, 50K on Solo, 175K on Business, 600K on Team, 2.25M on Agency, 10M on Enterprise. Static codes are unmetered on every plan because the link lives in the QR itself, not on our server. A scan is one hit to the redirect URL (aqr.net/xxxxxxx). We count by month per account (all your dynamic codes combined).
If you exceed your cap in a given month, the redirects keep working. We email you so you can decide whether to upgrade or ride out a spike. We will not rate-limit you solely to force an upgrade, that's the no-lock-in commitment. Reasonable operational limits apply for traffic that looks like bot amplification or extortion scenarios, per our Terms of Service. If you're planning a campaign well over your cap (say, a Super Bowl QR), email us first and we'll coordinate capacity so the first scans are as fast as the millionth.
What happens to my codes if I stop paying?
They keep working for 90 days. That's the whole point of the grace period, we built this because we were sick of watching printed campaigns go dead the second a subscription lapsed. After 90 days, the redirects stop. Your data stays; you can reactivate any time.
If you want them to keep resolving past day 90, downgrade to Keep-Alive (next Soalan Lazim). And as a separate guaranteed-forever fallback, print the static backup QR we generate for every dynamic code, it resolves directly to your URL without touching our infrastructure.
What's Keep-Alive?
A preservation tier you can downgrade into when you no longer need full Pro. Your printed codes keep resolving for as long as you keep paying, but you don't get the dashboard, the API, the analytics, or new code creation. Keep-Alive is read-only, destinations are frozen at the cancel snapshot, and to change one you reactivate Pro.
The tier is matched to the plan you cancelled from. KA-Team (from Business or Team): $14/mo, $10/mo annual ($120/yr), $1,000 decade, 1,500 codes and 100,000 scans/mo. KA-Agency: $40/mo, $29/mo annual ($348/yr), $2,880 decade, 4,000 codes and 300,000 scans/mo. KA-Enterprise: $199/mo, $149/mo annual ($1,788/yr), $14,400 decade, 15,000 codes and 1,000,000 scans/mo. Solo customers downgrade direct to Free; their static-forever codes keep working regardless. If your prior cap exceeds the matched KA tier, code-preservation and scan-cap add-on packs let you preserve more without jumping a full tier.
Design (colors, logo, frame) is frozen at the last saved state. Analitik imbasan drop to a 30-day summary. Switching from Pro to Keep-Alive is instant and prorated; if you're mid-grace from a prior cancellation, those grace days carry over so you don't double-pay. Full path comparison + Decade legal terms: /cancel/.
What does the dashboard actually show?
Open /stats/ after sign-in and you get over twenty pre-computed panels, anomaly flags (surge / drop berbanding your 14-day baseline), milestones (first scan, 100th, 1,000thβ¦), cohort retention, day-of-life curves, weather correlation, local-time heatmaps, scan-velocity tiers, performance-berbanding-target bullets, year-over-year, country breakdowns, top tags, scan distribution, print-to-first-scan timing, stale-code hygiene lists, and a deterministic ask-bar for canned queries. Team and Agency add a member leaderboard, a team-activity feed, and hourly-bucket resolution on every chart. Nothing to wire up, every panel reads from the same scan log we already store.
Per-code deep-stats (the same suite scoped to one shortcode) lives on the code's edit page.
What do you actually store when someone scans a code?
Three things: the UTC date, the country (from CF-IPCountry), and whether it was a mobile, tablet, desktop, or unknown device (from a short UA regex). We discard the User-Agent string immediately after classification. We never see IP addresses. There are no cookies, no pixels, no retargeting integrations.
Every country aggregate below 5 scans in the selected window is folded into "Other" so individual users can't be re-identified from a small sample.
Can I use this with other analytics tools?
Not directly, that would require us to pass data imbasan to third parties, which would break the privacy guarantee. You can always eksport your own dataset and correlate it yourself, but we won't ship a Google Analytics or Facebook Pixel integration. The whole point of this product is that we don't do that.
What's in the REST API?
Everything the dashboard does: list, create, edit, pause, delete codes, pull analytics. Bearer tokens are issued in your account page (Business+). Had kadar: 1,000 requests/day on Business, 10,000/day on Team, 50,000/day on Agency, custom on Enterprise. Every response carries X-RateLimit-Remaining so you never have to guess.
Do all plans really include unmetered static codes?
Yes, every plan, including Free, includes our static-forever generator at qr.abundera.ai with no per-code limit and no scan cap on those codes. The link is encoded directly inside the QR; there is no redirect server in the middle. Once you've printed a static code, it works forever, even if you cancel, even if our company shuts down. The bytes on paper carry the data; we don't host them anywhere.
Use static for: business cards, restaurant menus with a permanent URL, signage, wedding invites, anywhere the destination won't change. Use the dynamic codes in your plan for: anything you might want to update later or want analytics on.
What's the difference between Free, Solo, Business, Team, Agency, and Enterprise?
Every plan includes the static-forever generator: print as many static kod QR as you need, no per-code cap, no scan cap, never expires. The numbers below are about dynamic codes (the redirect-tracked, analytics-collecting kind).
Free starts at 1 dynamic code. Each verification (phone or payment method, no charge either way) adds 1 more code, up to a 3-code ceiling. 500 scans/mo on dynamic codes, 30-day analytics, static backup QR included.
Solo ($9/mo annual, $12/mo bulanan), 200 dynamic codes, 50K scans/mo, 12-month analytics. For individuals and side projects.
Business ($29/mo annual, $39/mo bulanan), 1,300 dynamic codes, 175K scans/mo, 36-month analytics, 12 seats with roles, REST API (1k req/day).
Team ($99/mo annual, $129/mo bulanan), 4,500 dynamic codes, 600K scans/mo, 30 seats with owner/admin/member roles + log audit, 60-month analytics with hourly buckets, REST API (10k req/day). Invites are email-based with 7-day TTL.
Agency ($349/mo annual, $449/mo bulanan), 17,500 dynamic codes, 2.25M scans/mo, 75 seats, multi-workspace (up to 10 teams), 84-month analytics, 50k/day API, priority email support under 24h. For consultancies and multi-client operators.
Enterprise ($1,500/mo annual, $1,800/mo bulanan), 85,000 dynamic codes, 10M scans/mo, 150 seats, 50 teams, SSO (SAML + OIDC) + SCIM provisioning, IP allowlist, log audit streaming, 99.9% SLA with service credits, 120-month (10-year) analytics retention, click-through MSA, US/EU/FedRAMP data residency options. Self-serve via Stripe Checkout like every other paid tier, no sales call required for the baseline limits.
Enterprise Scale, above the baseline Enterprise tier. Higher limits, negotiated MSA, BAA, custom SLA, custom data-residency contract. Talk to sales.
Is this related to qr.abundera.ai?
Yes, same team, same design ethos. qr.abundera.ai is the free static QR generator (130+ types, 26 languages, zero backend, zero outbound requests). Pro is the paid dynamic-link layer on top of it. Codes you create in the free tool can be "saved to Pro" in one click.
Can I self-host?
Not today. The code is Cloudflare-native (D1 + KV + Workers), and the operational cost of supporting self-hosted installs isn't something we can do well at our size. If this matters to you, email us, we'd like to understand the ask.
GDPR / CCPA / data residency?
The scan schema stores no personal data by design, country + device class only, never IP or user agent. The users table stores email + Stripe IDs; you can eksport everything via GET /api/user/eksport or request deletion from your account page (soft-delete now, hard-delete after 30 days). Data resides in Cloudflare D1 (global) + KV (edge-replicated). We don't use third-party trackers.
Stop printing codes you don't own.
Five-minute setup. Twenty-plus analytics surfaces waiting on the other side. Cancel any time and Keep-Alive preserves your printed codes forever from $2/mo. Your codes will work even if we disappear.
See plans