QRCode SuiteQR platform
Hosted forms

QR Code Forms

A QR code form is a code whose destination is a form QRCode Suite hosts for you at the code own short address. There is no separate form builder to subscribe to, no embed to paste into a website you may not control, and no page to keep alive: scan, answer, done. Every submission is stored as a lead attributed to the code that produced it, with an explicit consent checkbox recorded alongside it. The email address is kept as a keyed hash for lookups and separately encrypted with AES-256-GCM so authorised members can read it and so a deletion request can actually be honoured. Hosted form pages are served with no-store and a noindex header, so they never turn up in search results.

Hosted form codes are part of the Business plan. Link Hub form and newsletter blocks capture leads on lower plans, including Free.

Start free See pricing

Hosted at the code own address

The form lives at the QR code short address rather than on a site you have to build and maintain. That is what makes it usable on a carton, a receipt or a leaflet for a channel you do not own.

Four hosted flows

Lead capture form, review collection with a five or ten point rating, wholesale enquiry with company, contact, volume, VAT and website fields, and loyalty reward that reveals a code once a claim is recorded. Each renders its own page from the same mechanism.

Consent recorded with the answer

Every hosted form carries an explicit consent checkbox stating that the details are stored so you can get back in touch, and the flag is written on the lead row itself rather than inferred later.

Email handled as PII, not as a text field

The address is stored twice: as a keyed hash for deduplication and lookup, and AES-256-GCM encrypted so members with write access can read it. It never lands in the free-form answers column.

Spam handling that does not annoy people

A hidden honeypot field catches automated submissions, submissions are rate limited, and the body is capped at 4 KB. A bot that trips the trap gets the same thank-you page as everyone else and learns nothing.

Not indexable, not cached

Hosted form pages answer with no-store and a noindex, nofollow robots header. A draft, paused or out-of-schedule code returns the same branded 404 as an unknown one, so nothing leaks about what exists.

Answers land in one inbox

Submissions appear in the Leads screen with a timestamp, the source flow and the QR code that produced them, filterable by code. CSV export is available from the Pro plan.

Push them onward

A signed qr.lead_captured webhook fires on each capture from the Business plan, so a CRM or a spreadsheet automation can pick the lead up without anyone opening the dashboard.

Frequently asked questions

Do I need to connect a store to use these QR codes?

No. Review, wholesale inquiry and loyalty codes serve a page hosted by QRCode Suite at the code’s own address. There is no store to connect, no plugin to install and no CRM to wire up — which is what lets you print one on a carton or a receipt for a channel you do not control.

Where do the responses go?

Into the Leads inbox in your dashboard. Every submission is timestamped and attributed to the QR code that produced it, so you can filter by code and tell a trade-show scan from a packaging scan. The inbox exports to CSV.

Which plan includes them?

The Business plan. Review Collection, Wholesale Inquiry and Loyalty Reward are Business-tier QR types; the free plan covers dynamic URL codes and a Link Hub.

Can I change the form after the code is printed?

Yes. These are dynamic codes: the printed image points at a redirect you control, so you can reword the prompt, rename the product or reward, or switch the extra fields on and off without reprinting anything.

Is the email address always required?

It depends on the flow. On a review form the email is optional, because a rating and a comment are useful on their own. On a wholesale inquiry and on a loyalty claim it is required — the first needs a reply address, the second trades the reward for a contact.

How is consent handled?

Every hosted form carries an explicit consent checkbox stating that the details are stored so you can get back in touch, and the consent flag is saved with the submission. Scans are recorded with hashed IPs rather than raw addresses, on EU infrastructure.

A form behind every printed code

Hosted, consent-first, and wired to your Leads inbox.

Start freeSee pricing