Changelog

Security

• Added Cloudflare Turnstile to the /register route to block bot registrations. Real users pass through without friction. Bots get stopped before they create an account.

• Two-factor authentication (2FA). Add an extra layer of security to your account. Enable it in your account settings and we will send a verification code to your email every time you log in.
• Help Center launched at /help. Step by step guides for every QR type and feature.
• Terms of Service updated with full coverage of file uploads, abuse reporting, data retention, and billing.
• WhatsApp and App Download QR types added to pricing and comparison table.

Security

• Added Google Safe Browsing URL scanning for Link-type QR codes. URLs flagged as malware, phishing, unwanted software, or potentially harmful applications are rejected at creation time with a flash error message. Fails open on API errors or missing key so Google outages never block QR creation.
• Malicious URL attempts are logged to the database and trigger an admin email alert via Flask-Mail, rate limited to one alert per user per hour using Redis to prevent inbox flooding.

• WhatsApp QR codes. Enter a phone number and optional message. When scanned opens WhatsApp ready to chat.
• App Download QR codes. Smart redirect sends iPhone users to the App Store and Android users to Google Play automatically.
• App Download and WhatsApp available on Starter and Pro plans.

• 30-day free trial on all paid plans. No credit card surprise, cancel anytime before it ends.
• PDF QR codes. Upload any PDF and share it with a QR code. Swap the PDF anytime without changing the QR code. Available on Starter and Pro.
• Soft delete with 7-day recovery. Delete a QR code by accident? You have 7 days to restore it from your dashboard.
• Security improvements. All uploaded files are now served through a secure proxy. Direct storage access is disabled.

• Bulk QR upload. Create up to 50 QR codes at once from a CSV file. Pro plan only.
• PDF QR type added to pricing and comparison table.

• Admin trial override system. Admins can grant users a free trial on any plan with an expiry date.
• Lifetime comp access. Admins can grant permanent Pro access for partners and VIP users.
• Soft delete grace period for trial accounts. QR codes are held for 7 days after trial expiry.