How privacy-masked QR tags work in India

A QR sticker on a car or a pet collar should solve two problems at once. The finder should be able to reach the owner in seconds. The owner should not have their phone number printed on a tag a stranger can photograph. Most Indian QR tag products solve only the first half. QRSprint is built around solving both.

The four-step flow

Every QRSprint scan looks like this:

1. The finder scans a QRSprint tag with any phone camera.
2. They land on a public page for that specific tag, with the owner's first name, the tag type, and a Message on WhatsApp button.
3. Tapping the button opens WhatsApp pointed at QRSprint Relay, not the owner.
4. The relay forwards the message to the owner's real WhatsApp. The owner replies inside the same conversation, and the reply routes back to the finder. No real numbers are exchanged.

Why the relay matters

Other Indian QR tag products simply slap a WhatsApp deep-link onto the tag with the owner's real number embedded. Anyone who scans the tag sees the number permanently. They can save it, share it, sell it, or use it to harass. Once a number is exposed it cannot be un-exposed.

The QRSprint relay solves this by acting as a middle layer. The finder only ever sees the relay number. The owner only ever sees the relay number. Either side can choose to share their real number, but it is opt-in, not default. The same architecture handles both directions: leg one is the finder reaching the owner, leg two is the owner replying without breaking masking.

The 24-hour WhatsApp session window

WhatsApp Business policies require that the business (the relay) can only message a user inside a 24-hour window opened by that user. This is good for privacy. It also means each scan opens a fresh 24-hour conversation. If a finder messages your tag and you reply 25 hours later, the relay will route the reply correctly, but if you wait 36 hours WhatsApp closes the window. We tell you which threads are open in the dashboard.

For OTP delivery and other SMS we use MSG91, an Indian DLT-compliant SMS gateway. For the masked-relay routing layer we run on top of WhatsApp Cloud API via Botbiz. Both vendors are documented in our privacy policy.

What the finder sees

The public scan page is intentionally minimal: the tag type (so the finder knows what they have found), the owner's first name (so they can address you), an emergency contact if you have set one (used for ElderTag and KidsTag medical alerts), and one button. There is no profile to browse, no other tags, no map of where you have been. The finder gets exactly enough information to act, and nothing else.

What the owner sees

Every scan and every message lives in your QRSprint dashboard. You see when the tag was scanned, rough geography of the scanner (city level, never a precise pin), the timestamps of every message in the conversation, and a one-tap delete for any thread you want gone. We retain message content for 30 days for support and abuse review, then we delete it.

When you would actually use this

• A car parked behind your bike. They scan, you get a ping in 10 seconds.
• A dog found at the next colony, scanned by the family that picked him up.
• A lost suitcase at an airport, scanned by ground staff to reach you at your hotel.
• A wandering elder with dementia, found by a kind stranger who sees the pendant.
• A laptop bag left in an auto rickshaw, scanned by the next passenger.

For all of these, the cost of being reachable should not be the permanent loss of your phone number's privacy. That is the whole point of QRSprint.

Try it

The cheapest way to see it work is to order a Vehicle Tag for ₹249, stick it on your windshield, then scan it yourself with your spouse's phone. The relay will ping your WhatsApp within seconds. The whole architecture clicks once you watch it happen in real life.

More reading: About QRSprint · All Smart Tags · Privacy policy