Status: Drafted April 2026. Internal-linked from the pillar at
/en/guide/qr-codes-that-dont-expire. All[VERIFY: url]markers flag claims needing human verification against live sources before publication.
A small winery in the Languedoc bottled the 2024 vintage last autumn — three thousand bottles, distributed across a handful of restaurants and specialist importers. On every back label, a QR code: since December 2023, EU regulation 2021/2117 obliges wine sold in the European Union to disclose ingredients and nutrition information digitally, and the QR is how you do it without a wall-of-text label [VERIFY: https://eur-lex.europa.eu/eli/reg/2021/2117/oj]. The winery used a popular e-label service, paid the first-year fee, and printed.
In March they got the renewal email. The service had restructured its pricing. The plan they’d paid under was being migrated to a new tier at roughly three times the monthly rate, with the old plan no longer available. Their choice was to pay the new price or let the codes deactivate on renewal day.
The second option was not a real option. The bottles were in shops. Some were in someone’s cellar. A few had presumably already been drunk. Reprinting the labels would have meant recalling three thousand bottles to peel and relabel them — logistically impossible and commercially suicidal. They paid.
The details vary, the irreversibility doesn’t. We hear variants of this story constantly: from a natural-cosmetics brand whose vendor added a “Pro” tier at renewal and moved analytics behind it, from a small-batch honey producer whose jars are still moving through farmers markets a year after printing, from a kombucha label whose provider got acquired and quietly migrated existing customers to a more restrictive plan.
This article is about how to avoid being that winery. It is a companion to the longer guide on QR codes that don’t expire, narrowed to one thing: QR codes on product packaging, where the gap between “print” and “last scan” is measured in years.
The irreversibility asymmetry
Every QR-code buyer eventually runs into a time-horizon mismatch. The provider’s business needs revenue this quarter; the printed code is committed to work for as long as the printed surface exists. On a restaurant table-tent, the mismatch is survivable — if the vendor goes away, the restaurant prints new tents in a day. On a business card it is mildly embarrassing. On product packaging it becomes structural.
Wine has a shelf life in years, sometimes decades. Cosmetics typically carry a two-to-three-year shelf life. Honey on a slow farmers-market shelf can sit for 18 months. And every unit produced is out in the world, uncatchable, for its entire shelf life plus however long the buyer keeps it before scanning.
The median small-SaaS company operates for four to seven years before shutting down, being acquired, or pivoting [VERIFY: CB Insights startup failure data or equivalent stable source]. That is shorter than the shelf life of a well-cellared bottle. Any QR provider you print on a product label is, statistically, a bet on a company that will probably not exist in ten years — and your QR codes need to.
On a menu you can correct a mistake in an afternoon. On packaging you cannot. Every decision you make about the QR code at print-time is one you are stuck with until the product cycles out of inventory — a horizon you mostly do not control.
Static or dynamic — and why dynamic is what most packaging buyers actually want
A static QR code encodes the destination URL directly into the pattern; no server is involved. A dynamic QR code encodes a short URL pointing at a provider’s server, which redirects to the real destination. Static codes are mechanically indestructible. Dynamic codes depend on the provider. (The pillar goes deeper.)
For packaging, most buyers want dynamic, for a defensible reason: regulation changes. EU 2021/2117 requires ingredient and nutrition data via QR, and the acceptable presentation has already been clarified since the regulation took effect [VERIFY: https://food.ec.europa.eu/safety/labelling_en]. The USDA Bioengineered Food Disclosure Standard has its own evolving guidance [VERIFY: https://www.ams.usda.gov/rules-regulations/be]. The EU Digital Product Passport, ramping from 2026 through 2030 under the Ecodesign for Sustainable Products Regulation, will add a comparable QR-driven disclosure layer for batteries, textiles, electronics, and eventually most physical goods sold in the EU [VERIFY: https://commission.europa.eu/energy-climate-change-environment/standards-tools-and-labels/products-labelling-rules-and-requirements/sustainable-products/ecodesign-sustainable-products-regulation_en]. If any of these frameworks change the data format — and they will — you want to update the destination page without recalling inventory.
So dynamic is correct. And dynamic, for packaging, is the most fragile possible configuration, because the thing making dynamic work is the vendor you no longer trust. Who provides your QR code matters more than what the QR code does.
The five failure modes
Trial expiration mid-run. A buyer signs up for a “free” plan, generates codes, sends the print file, and discovers — usually via email, seven days later — that the codes deactivate unless a subscription starts. By then the labels are in production. QR Code Generator’s own support article explains this mechanic plainly: trial codes are deactivated at trial end [VERIFY: https://support.qr-code-generator.com/hc/en-us/articles/7665046137613]. A customer on that same provider’s own community forum has a thread titled essentially “my printed business-card codes are expired, what should I do” [VERIFY: https://community.the-qrcode-generator.com/t/my-qr-codes-for-business-cards-already-printed-are-expired-what-should-i-do/250]. If that happens on a business card, it’s embarrassing. If it happens on ten thousand labels on pallets, it is a recall.
Subscription lapse at year two. Year one is paid up front, often bundled with a launch discount. Year two is where the vendor tests what the customer will tolerate. Trustpilot for QR Code Generator carries repeated complaints about the gap between the displayed monthly price and the annual amount actually charged, with single-code customers reporting charges over €100 [VERIFY: https://www.trustpilot.com/review/www.qr-code-generator.com]. For packaging, year two is often exactly when the problem shows up: the first production run is nearly sold through, the reorder is in planning, and a customer scans a bottle on a dusty back-shelf to find the redirect dead.
Vendor rebrand or acquisition. The Uniqode pattern, covered in the pillar: the service formerly known as Beaconstac rebranded in 2023 and, per repeated Trustpilot reviews, restructured existing customers’ plans in ways that roughly doubled costs while downgrading included features [VERIFY: https://www.trustpilot.com/review/www.uniqode.com]. Acquirers almost always reprice to align acquisitions with their own tier structures — which often means the tier existing customers signed up for is no longer available. The printed QR keeps pointing at the same infrastructure. The infrastructure starts charging more.
Regulatory URL change. This is the packaging-specific failure mode the general QR articles don’t cover. Suppose EU Food Information implementing guidance shifts in 2027 — the ingredient-data schema adds a required field, or an existing field gets restructured. Your dynamic QR still resolves, but the page it lands on no longer satisfies the regulation. A good provider lets you bulk-edit destinations and export your mappings as primitives. A bad provider requires per-code clicks or charges an “API access” premium tier to do it in bulk. Most buyers discover this distinction only at the moment they need it.
Physical damage and print resolution. The failure mode the QR industry is comfortable discussing, because it is the only one where the answer isn’t “our vendors are the problem.” It’s real — a code at too small a size on absorbent paper with insufficient contrast will fail to scan — but it is solved by fundamentals: minimum 2cm square for hand-scan use, 30% quiet-zone margin, high contrast against the substrate, error-correction level Q or H for surfaces that may get scratched. The other four failure modes are where the money goes.
Regulation as free content — and a free durability argument
Each compulsory-QR regulation creates two things: demand, and a reason for the buyer to care specifically about durability. The regulator will not feel sorry for you if the QR went dead because your vendor raised prices. Compliance is your problem. And the shelf life of regulatory compliance is as long as the regulation itself, which in the EU can be decades.
This is why the packaging-QR market attracts a specific kind of vendor — vertically focused, often expensive, typically subscription-only. The pitch is “we handle the regulation for you,” which has merit. The pricing argument does not always have the same merit. A €40-per-month subscription, over the ten-year life of a wine vintage, is €4,800 for what is mechanically a URL redirect plus a compliance-formatted landing page. Industry press has started to notice: FoodNavigator-USA and specialist wine trade publications have published pieces questioning the TCO of e-label subscriptions for small producers [VERIFY: locate specific FoodNavigator-USA and wine-trade articles on e-label costs], and Hacker News threads periodically surface the same question from a tech-buyer angle [VERIFY: harvest relevant HN threads from the keyword research pack].
The wine-label carve-out: why small batches don’t get served
Wine is the clearest case, because 2021/2117 and the industry’s response to it make the gap explicit.
A small European winery — 2,000 to 10,000 bottles a year across a few cuvées — has the same regulatory obligation as a large producer, but nothing like the budget. Winery-specialist QR vendors have filled the demand: PinotQR, e-label.eu, Raisin and national-language incumbents offer “wine e-label” products structured as per-SKU or per-label subscriptions [VERIFY: PinotQR, e-label.eu and Raisin live pricing pages]. Typical list prices sit between €15 and €60 per cuvée per year. For a large négociant producing millions of bottles, this is nothing. For a winemaker producing 3,000 bottles of a €12 cuvée that might take two years to sell through, a multi-year subscription whose renewal cost is decided by the vendor is an unpriced liability on the cellar inventory.
Heldqr’s €39-for-10-years pricing is designed specifically so this math works for small-batch wine — and, by extension, small-batch cosmetics, honey, olive oil, preserved fish and the long tail of artisanal CPG. The regulation does not require more than a durable QR code pointing at a compliant disclosure page. We do not try to charge more than that is worth.
If your destination is a URL on the winery’s own domain and you are confident that domain and page will both stay alive for ten years, a static code via QRCode Monkey or Adobe Express is free and correct. Where Heldqr fits is the specific case of needing dynamic codes — to accommodate regulatory changes, or update landing pages without reprinting — combined with not wanting a multi-year subscription relationship with a vendor you’ve never met.
The checklist, adapted for packaging
Does the provider publish a continuity plan? If this vendor shuts down, what happens to the QR codes on the product already on the shelf? The answer you want is a written, public, irrevocable commitment — 12 months notice, published redirect database, open-source resolver, domain escrow. The answer you get from most providers is silence, which means “nothing.” On packaging, this question stops being an abstraction. Your inventory is on the shelf; their continuity is your recall cost.
Are redirects exportable? Can you, at any time, get a machine-readable list of every code you own and where it points? A vendor who makes this easy is not planning to use lock-in as leverage. A vendor who charges for it, or gates it behind a sales call, is keeping the door closed on purpose.
How do they handle regulatory URL changes? Suppose you need to change the destination for all 2024 Syrah bottles from v1 of the e-label format to v2. One operation, or fifty clicks across five cuvées and three vintages? Bulk edit and CSV round-trip are what you want.
Is pricing per-code or flat? Per-code pricing means every SKU is a recurring line item; flat pricing bounds your cost structure. For anyone with multiple SKUs, flat pricing is worth a meaningful premium.
One more, less urgent but still worth asking: is the pricing commitment’s duration named explicitly? “Lifetime” on a packaging QR is not a number. Ten years is. Pick a vendor who will name a number.
How to do this with Heldqr
Heldqr’s three tiers map onto packaging buyers in predictable ways.
The free tier is the right choice for a pilot. One QR code, no expiration, no scan cap, no ads injected in the redirect, no credit card. For a first-time indie producer bottling a 500-unit test run, a one-off trade-show SKU, or a limited product for a wedding-favour client, the free tier carries you indefinitely. We do not convert free users against their will.
The €39 for 10 years one-time tier is the mainstream fit for small CPG, winery, honey and cosmetics operators. Flat price, ten-year commitment in writing, unlimited dynamic codes under the plan, scan analytics, CSV export, continuity-plan coverage. For a winery with five cuvées at 3,000 bottles each, or a soap-maker running four product lines over a decade, this is the right tier [VERIFY: confirm Heldqr’s 10-year plan is flat-price with unlimited codes on the live /pricing page].
The €9 a month Power tier is for the specific case where QR codes behave like rotating marketing assets rather than long-term compliance obligations: CPG startups doing heavy A/B testing on packaging, seasonal-promotion beverage brands, subscription-box operators refreshing artwork quarterly. If you stop paying, the codes revert to the free-tier resolution floor rather than deactivating — there is no recall risk, only a loss of analytics.
Full details and live pricing at heldqr.com/pricing.
What Heldqr isn’t right for, in packaging specifically
Very-high-volume brands. A multinational operator producing tens of millions of units per SKU with sustained millions of scans per month is not served by our public tiers. Enterprise arrangements exist — talk to us first — but defaults are priced for SMB, indie and small-batch operators.
Regulated anti-counterfeit workflows. If your QR needs to participate in a unique-per-unit, tamper-evident authentication flow validated against a central authority, you want a track-and-trace specialist. Scantrust, Certilogo and DSS.ag are appropriate vendors here [VERIFY: company names and product fit]. Heldqr provides durable redirection, not anti-counterfeit primitives.
Unit-level serialization with track-and-trace. Per-unit unique codes with a system recording where and when each unit was scanned (pharmaceutical-grade serialization, the higher tiers of DPP compliance for batteries) need a specialist serialization platform. We are a redirect layer with batch-level granularity.
Purely static use cases. If your destination is on a domain you own and will keep alive for ten years, a static QR is free via any static generator. You do not need us for a problem you can solve with a free tool.
Closing
The rule for packaging QR codes is simple and unforgiving: pick the provider on the assumption that every incentive they have over the next ten years will push them to charge more, change terms, or sell out. Then pick one whose structure makes those outcomes less painful for you.
A published continuity plan converts “the vendor disappeared” from a catastrophe into a migration. Flat pricing converts “the vendor raised prices” from a hostage negotiation into a shrug. An actually-free free tier converts “we want to pilot this” from a commitment into a test.
If Heldqr fits — small-batch producer, regulation-driven QR obligation, allergy to subscription lock-in — the free tier is here. If a different vendor fits better, the longer pillar guide has the full provider-evaluation checklist. Either way: print-time is a commitment, and ten thousand labels on pallets are not a reversible decision.