How QrioTag Encryption Protects Your Privacy
A deep dive into AES-256-GCM encryption, HMAC signatures, and why your personal info is never exposed to finders.
Privacy is at the core of QrioTag. When someone scans your tag, they never see your name, address, or phone number. Here is how.
AES-256-GCM Encrypted Tag IDs
Every QR code contains an encrypted tag ID — not your profile data. The encryption uses AES-256-GCM, the same standard used by banks and governments. Without the decryption key (stored only on our servers), the QR code is meaningless to anyone who tries to read it directly.
HMAC Signatures
Each tag ID is also signed with an HMAC-SHA256 signature. This prevents anyone from forging a fake tag ID to access someone else's profile.
Anonymous Relay Messaging
When a finder wants to contact you, they type a message in our web app. We relay it to you by email or SMS — the finder never sees your contact details. You choose whether to respond, share your location, or stay anonymous.
What Finders See
When someone scans your tag, they see only what you've chosen to make public: a return reward message, a first name, and a contact button. Nothing else.
What We Don't Store
We never log the GPS location of scans. We don't sell your data. We don't show ads. QrioTag's business model is selling physical tags — your data is not the product.
Ready to tag what matters?
Set up your first tag in minutes and keep track of what matters most.
Get Started Free