Beepify
•16 min

Dynamic vs Static QR Codes: Which Should Your Business Use?

Dynamic vs Static QR Codes: Which Should Your Business Use? !

Dynamic vs Static QR Codes: Which Should Your Business Use?

Dynamic vs Static QR Codes: Which Should Your Business Use?

Printed QR codes beside a small label printer

A static QR code holds its content inside the pattern and never changes. A dynamic QR code holds a short redirect link, so you can change the destination after printing and see how often it is scanned. For a salon, cafe or shop, the rule is simple: use static for things that never change and must work offline, and dynamic for anything tied to marketing, menus, offers or loyalty.

The rest of this guide shows how to tell them apart, what each costs you in practice, what Dutch privacy rules mean for scan tracking, and how to decide for your counter, window or receipt.

Beepify
Turn QR Scans Into Repeat Visits
Beepify connects QR code stamp collection with digital reward cards and push notifications to help salons, cafes, and retailers encourage return visits.
Explore Beepify

TL;DR

  • Static codes store the data in the pattern itself. They cannot be edited, give you no scan numbers and work without any server.
  • Dynamic codes store a redirect link. You can change the destination, schedule it and measure scans, without reprinting.
  • Use static for Wi-Fi details, a phone number or a contact card. Use dynamic for menus, promotions, review requests and loyalty access.
  • Tracking scans in the Netherlands means telling people what you collect. Raw IP addresses and marketing pixels on the landing page change what the AVG (the Dutch name for the GDPR) requires of you.
  • For a loyalty program, the QR code is only the door. What matters is what happens after the scan: the stamp, the card in the wallet, the reason to come back.

Table of Contents

What a QR code actually is

A QR code is a data carrier. It is a printed pattern that encodes a short string of characters, almost always a web address, and nothing more. ScanKit’s explainer describes it as a pattern defined by the international standard ISO/IEC 18004 that cannot run code and has no callback of its own.

That is why the static versus dynamic question is really a question about where the information lives. In a static code, it lives inside the black and white squares. In a dynamic code, it lives on a server, and the squares only point to it. According to the Scanova documentation, that one difference decides what can change after printing, what can be tracked and which content types each kind supports.

Static QR codes: fixed, free of servers, and blind

A static code writes your content straight into the pattern. Scan it and the phone reads the content directly, with no stop in between.

What you get

  • It works offline. Because nothing is fetched, a static code can reveal a Wi-Fi password or a phone number with no internet connection. The Scanova documentation points out that static codes are preferred when reliability is non-negotiable and no connection can be guaranteed.
  • It does not depend on a provider. If a vendor’s servers go down, a static code still works, while a dynamic one becomes a dead link.
  • It is usually free to create. Most generators make static codes at no cost, since there is no ongoing hosting.

What you give up

  • No editing. If the address changes, the printed code is wrong and you reprint.
  • No analytics. According to the Scanova documentation, static codes provide no scan data. You will never know whether twenty people scanned the poster by the door or none did.
  • Denser patterns. The more you encode, the more crowded the pattern gets. A short URL makes a clean code, but a long address or a full contact card makes a dense one that is harder to scan at small sizes or on curved or glossy surfaces.

Good uses for static

  • Guest Wi-Fi credentials on a table card
  • A contact card (vCard) for a business card
  • A direct phone number or an email address
  • A short, permanent web address you will never move, such as the front page of your own domain

A dynamic code encodes a short redirect address. When someone scans it, the phone first visits the redirect server, which then sends the person on to your actual destination. You can change that destination whenever you like.

What you get

  • Editable after printing. Swap a summer menu for the winter one, or point a window sticker at a new offer, without touching the print.
  • Scan tracking. You can count scans and, depending on the provider, see device type and approximate location. The Scanova documentation also lists scheduling, password protection and UTM parameters as features static codes lack.
  • A simpler pattern. Since only a short redirect is encoded, the pattern stays low-density whatever the final address looks like. The OASIS secure QR code specification is a technical source on how QR content is structured; the practical point for you is that short payloads scan more reliably at small sizes.

What you give up

  • A dependency. Every scan needs the redirect server to respond. If the provider shuts down, or you stop paying a subscription, the printed code may stop working.
  • A privacy duty. Anything that logs scans is a form of data collection. More on that below.
  • A trust question. The redirect is a place where things can go wrong, from ad-supported detours to data scraping.

Good uses for dynamic

  • Menus that change by season or by week
  • Promotions, event pages and booking links
  • Review requests after a visit
  • Loyalty program access
  • Anything printed in volume that you cannot afford to reprint

Side by side

Question Static QR code Dynamic QR code
Where is the content? Inside the pattern On a server, reached by a short redirect
Can you edit it after printing? No Yes
Scan analytics None Yes, depending on the provider
Works with no internet? Yes, the content is read directly No, the redirect needs a connection
Survives a provider shutting down? Yes Not necessarily
Pattern density Grows with the content Stays low and consistent
Typical cost Usually free Often a subscription
Privacy duties Minimal on the code itself Disclosure, a DPA and a look at what is logged
Best for Wi-Fi, vCards, phone numbers Menus, offers, reviews, loyalty

How to tell which one you are looking at

This is one of the questions people ask most. There are three practical checks:

  1. Read the link. Scan the code and look at the address your phone shows before you open it. If it is the final page on the real site, it is probably static. If it is a short address on an unfamiliar domain that then forwards you somewhere else, it is dynamic.
  2. Look at the pattern. A very dense code usually carries a lot of data directly, which points to static. A sparse, simple pattern pointing to a long destination suggests a redirect.
  3. Ask the generator. Any provider that offers editing or analytics is selling dynamic codes. A generator that promises unlimited free codes with no account is almost always making static ones, and you should check its terms before printing anything in volume.

Can you turn a dynamic code into a static one? Not in place. The pattern is different, because a static code must encode the real destination. You generate a new static code and reprint.

What Dutch privacy rules mean for dynamic codes

The tracking that makes dynamic codes useful is also what makes them a compliance topic in the Netherlands. Three points matter for a small business.

Disclose what you collect. According to Scanoo’s guide for EU businesses, companies using dynamic QR analytics must disclose their data collection practices. The same guide says that if a provider only collects aggregate metrics such as device type or city-level location, processing can often happen without a consent banner, but that if raw IP addresses are logged, consent is mandatory.

Have a data processing agreement. The same guide advises making sure a Data Processing Agreement is in place with your QR provider, and checking that data is hosted in the EEA or covered by an approved transfer mechanism such as the EU-US Data Privacy Framework.

Look at the landing page, not just the code. The ScanKit analysis makes the sharper point: the compliance risk often sits less in the code and more in the page it opens. If that page runs Google Analytics 4 or marketing pixels, a consent banner is not optional, however minimal the QR analytics are. The Dutch regulator publishes its own position on tracking cookies, including its view on cookie walls, which is worth reading before you design a landing page.

This is general information, not legal advice. If you log scan data about customers in a way that goes beyond simple counts, ask your privacy officer or a Dutch privacy lawyer to check your setup.

For a deeper look at how Dutch small businesses handle QR scanning and privacy together, see our guide to QR code check-in and GDPR for Dutch small businesses.

Security: choose the redirect you can trust

QR codes are a known route for phishing. The European Commission’s digital building blocks page on QR security notes that a QR code is a useful carrier of data and links, but that poorly constructed ones can be misused. An academic paper on QR code security describes how attackers distribute malicious codes under false pretenses.

For your business, that translates into a few habits:

  • Use a redirect on a domain you control or a provider you have vetted, not a free, ad-supported generator you found five minutes ago.
  • Stick a printed code behind glass or on a surface that cannot easily be covered. Fake stickers placed over real ones are the simplest attack.
  • Test the code on your own phone every few weeks and after any change.
  • Put your brand name and a short line of text next to the code, so people know what they will get when they scan.

Which one for a salon, a cafe or a shop

Here is how the choice plays out at the counter.

Cafe. The Wi-Fi card on the table should be static, since it must work even when the connection is the thing in question. The menu code should be dynamic, so you can swap prices and seasonal items without a print run. The loyalty code at the till should point to something that records visits, which means a dynamic setup.

Salon. A booking code on the mirror or reception desk should be dynamic, so you can change the booking page or add a promotion. A review request at checkout should be dynamic too: you may want to change the platform you send people to. A vCard on your business card can stay static.

Retail shop. Window and shelf codes that promote offers should be dynamic, so a campaign can end without leaving a dead poster behind. A code linking to your permanent store page can be static, as long as that address will really never change.

Static and dynamic QR uses across three businesses

The pattern: if you will ever want to change it, count it or end it, make it dynamic. If it is a fixed fact that must work anywhere, make it static.

Why a loyalty program is a different case

Most comparisons stop at the redirect. For loyalty, that misses the point. A customer who scans a code at your counter is not looking for a web page. They want a stamp, and a reason to return.

A static code that links to a fixed page can only show the same thing to everyone. It cannot tell you who came back, or give a particular customer credit for a visit. A paper card avoids the problem but gets lost in a wallet or bag. A scan that credits a stamp to a specific customer’s card needs a system behind the code: something that knows who scanned, when and how many stamps they now have.

QR scan adds a stamp toward a customer reward

That is the job a digital loyalty platform does. If you want to see how it works end to end, our explainer on how QR code loyalty cards work walks through the scan, the stamp and the reward. For a hands-on route, the setup guide for business owners covers it without technical jargon.

Our perspective: the code is the smallest part

We talk to salon owners, cafe managers and shopkeepers who start with the same question: which QR code should I print? Our answer is usually to turn the question around. Ask what you want the customer to do after the scan, and what you want to know afterwards.

If the answer is “read a fact”, a static code is fine and you should not pay for more. If the answer is “come back”, then a bare redirect is not enough, because the real work happens after the scan. The customer needs a card they already carry, and you need a way to reach them again. That is why we built Beepify around the wallet rather than around an app: customers add the card to Apple Wallet or Google Wallet, with no download, and a stamp is collected by scanning a code. From there you can send a push notification when a reward is close, which a printed code can never do.

We also see owners overestimate the value of scan counts. Knowing that 300 people scanned a poster tells you little. Knowing that a customer collected a fourth stamp and has not been back in three weeks tells you whom to message. Choose the technology that gives you the second kind of information, and keep static codes for the jobs they do best.

— erenmette

Where Beepify fits

If your goal is more repeat visits, our QR code stamp card lets customers collect stamps by scanning a code at your counter, and the card sits in their phone wallet. You customize the reward card to your brand, send push notifications, and can automate customer review requests. Plans on our pricing page start at €45 per month for Starter (€540 per year), with Professional at €86.67 per month (€1,040 per year) and Multi-Location at €207.50 per month (€2,490 per year). Extra scanners cost €5 per month each and extra locations €25 per month each. Enterprise is available for custom needs such as POS integration or white-label, with no published price. We also offer a free trial and a results guarantee that refunds you if retention does not measurably increase.

If you would like to see the Apple Wallet side first, read about issuing Apple Wallet loyalty cards without NFC.

A short checklist before you print

  1. Decide the job. Information that never changes, or something you will want to update, measure or retire?
  2. Pick the type. Static for fixed facts and offline use. Dynamic for anything else.
  3. Check the owner of the redirect. Is it your domain, or a provider you have vetted? What happens to your printed codes if you stop paying?
  4. Read the privacy terms. Does the provider log raw IP addresses? Is there a DPA? Where is the data hosted?
  5. Audit the landing page. Are there analytics tools or pixels that need a consent banner?
  6. Size and test it. Leave a clear margin around the code, print it large enough for the viewing distance and test it on both iPhone and Android.
  7. Label it. Brand name plus one line saying what the scan does.
  8. Schedule a recheck. Scan every code you have out in the world once a month.

FAQ

Is a dynamic QR code better than a static one?

Not always. Dynamic codes are better when you need to edit the destination or measure scans, which covers most marketing, menus and loyalty use. Static codes win for fixed information that must work offline, such as Wi-Fi details or a phone number.

Do dynamic QR codes expire?

The code itself does not expire, but it only works while the redirect behind it is active. If the provider shuts down or your subscription lapses, a printed dynamic code can become a dead link. Ask any provider what happens to your codes if you stop paying before you print in volume.

It depends on what is collected. According to Scanoo’s guide, aggregate data such as device type or city-level location can often be processed without a banner, while logging raw IP addresses requires consent. If the landing page runs analytics or marketing pixels, a banner is needed regardless. Check your own setup with a privacy professional.

Can a static QR code be used for a loyalty card?

A static code can open a page, but it cannot know who scanned or credit a stamp to that person. For a real stamp card you need a system behind the code that records each customer’s visits. That is what a digital loyalty platform provides.

How do I know my QR code is safe to scan?

Check the address your phone shows before opening it, and make sure the code has not been covered by a sticker. For your own codes, use a redirect on a domain you control or a provider you trust, and avoid free generators that add ads or third-party detours.

Sources

Chcesz wypróbować?

Stwórz własną cyfrową kartę stempli w 5 minut. Zacznij za darmo, bez aplikacji.

Wybierz branżę i zobacz, jak to działa
Albo najpierw zobacz, jak działa Beepify

Powiązane artykuły

Customer loyalty for your grooming salon: 7 ways to get owners back every 8 weeks

Customer loyalty in a grooming salon is about the interval: a dog that comes every 8 weeks is worth more than a new client. Seven ways to get owners back on time.

8 min czytania

Loyaliteitsdata analyseren: zo lees je wat je spaarkaart vertelt

Zo analyseer je loyaliteitsdata: welke data je verzamelt, welke kpi's tellen, hoe je klanten indeelt met RFM en hoe je de cijfers omzet in acties die werken.

Apple Wallet vs Google Wallet for Loyalty Cards

Apple Wallet vs Google Wallet for loyalty cards: how each works, where they differ for a business, and what to check in the Netherlands before you launch.

Powrót do bloga