QR codes vs WiFi login for collecting customer emails
QR codes force guests to take four or five active steps before you capture their email, and most drop off before they finish. Guest WiFi captures verified, first-party data automatically at the moment of connection, building a larger and more accurate CRM from the same foot traffic. This guide shows you where QR codes leak contacts, why WiFi login outperforms them by three to four times, and how to set up the automations that turn that data into repeat visits.
Why this matters for your venue
Every guest who walks through your door and leaves without giving you their email address is a missed opportunity. You cannot run a retargeting ad to someone you cannot identify. You cannot send a birthday offer to someone whose name you do not know. You cannot measure whether your Tuesday promotion actually brought people back if you have no way to connect the email send to the venue visit.
Building an owned email list is the single most cost-effective marketing investment a physical venue can make. The cost per send is a fraction of paid social. The audience is yours permanently, not rented from a platform that can change its algorithm overnight. And because the contacts came from people who physically visited your venue, the intent signal is as strong as it gets.
The question is not whether to build the list. The question is how. Two methods dominate the conversation right now: QR code sign-up forms and guest WiFi login capture. They are not equal. The gap in performance is significant, and understanding why it exists will help you make the right call this quarter.
The approach
Where QR codes work - and where they leak
QR codes have a legitimate role in venue marketing. They are cheap to deploy, require no network integration, and can be placed anywhere. For certain use cases - linking to a menu, directing guests to a review page, or promoting a specific event - they are perfectly adequate.
For email capture, they are not. The problem is friction. A guest must complete four to five steps before you capture their email: notice the code, decide to scan it, wait for the page to load, type their email address manually, and submit the form. Each step is a drop-off point.
Consider the typing step alone. Most guests are on a mobile keyboard. Typos are common. Some guests will deliberately enter a fake address to access a discount code. Others will start the form and abandon it when a conversation picks up at the table. The result is a capture rate of 15% to 25% of your foot traffic - and a significant portion of what you do capture is inaccurate or undeliverable.
QR codes also depend on active intent. The guest must choose to participate. In a busy restaurant or bar, most guests are focused on the experience, not on scanning a tent card. The QR code competes with conversation, food, and their existing phone activity. Passive placement rarely drives high opt-in rates.
Why WiFi login captures more
Guest WiFi capture works on a different principle. The guest already wants something: internet access. When they select your network, a captive portal - a branded login page - appears automatically. They enter their email address to get online. The value exchange is immediate and unambiguous.
Because the motivation is strong and the friction is low, WiFi login capture typically delivers a 60% to 80% capture rate from the same foot traffic. That is three to four times more contacts, with no additional marketing spend and no reliance on staff to promote a sign-up mechanic.
Data quality is also higher. A guest who types a fake email address to access the WiFi will not get online, because the verification email will not arrive. This built-in incentive to enter a real address means your CRM fills with accurate, deliverable contacts. You can reinforce this further by offering social login via Google Workspace or Microsoft Entra ID, which authenticates the guest against an existing verified account.
Critically, every email captured through a WiFi login is a conscious-choice opt-in. The captive portal presents a clear marketing consent checkbox - unchecked by default - alongside the terms and conditions. The guest makes an active choice to receive your marketing. This is exactly what GDPR requires. Your database is not just larger; it is legally defensible.
How to do it with your guest WiFi
Purple Engage integrates directly with your existing hardware as a cloud overlay. You do not need to replace your access points. Purple works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme, and Fortinet. The configuration is straightforward.
Step 1: Configure the captive portal. Set up a branded splash page that appears when guests connect to your Guest WiFi. Use your logo, brand colours, and a short, clear message. Keep the design uncluttered. The goal is to get the guest online quickly, not to sell them something on the login page.
Step 2: Define your data fields. Make email address and first name mandatory. Add optional fields - date of birth is the most valuable for campaign automation - but do not make them required. Every extra mandatory field reduces your completion rate. Keep the mandatory set to the minimum you need to run your core automations.
Step 3: Ensure GDPR compliance. Include a clearly worded marketing consent checkbox, unchecked by default. Link to your privacy policy. Do not bundle marketing consent into the WiFi access agreement. These are separate decisions under GDPR. A guest must be able to access the WiFi without ticking the marketing box. Your opt-in rate will still be high, because the guest is already engaged and motivated.
Step 4: Automate the data sync. Purple Engage connects to your CRM and email platform. Data flows automatically from each WiFi login into your marketing database. The list builds itself, without manual exports or spreadsheet imports.
For multi-site operators, Purple's cloud overlay architecture means you manage all locations from a single dashboard. You can run location-specific campaigns or group-wide campaigns, and you can identify guests who visit multiple sites - a valuable segment for loyalty programmes.
What to send, and when
Capturing the email is the start. The value is in the automation that follows. Three campaigns should be running from day one.
The welcome email. Send automatically within 24 hours of a guest's first WiFi connection at your venue. Thank them for visiting, introduce your brand, and include a clear incentive for their next visit - a discount, a free item, or an exclusive offer. Timing matters: a welcome email sent within 24 hours consistently outperforms one sent a week later, because the experience is still fresh. This single automation, properly configured, will drive measurable repeat footfall.
The birthday campaign. If you captured date of birth during the WiFi login, set an automated email to send two weeks before the guest's birthday. Offer something personal and time-limited. Birthday campaigns are among the highest-converting automations in hospitality marketing, because the offer is relevant and the timing is predictable.
The lapsed guest campaign. Define a threshold - 60 or 90 days without a WiFi connection at your venue - and trigger a re-engagement email automatically when a guest crosses it. Keep the message simple: acknowledge the gap, make a compelling offer, and give them a reason to come back this week. This campaign directly addresses churn, and it targets people who have already demonstrated they like your venue.
For retail, the same logic applies. A shopper who connected to your in-store WiFi three months ago and has not returned is a lapsed shopper. The trigger and the offer change; the mechanic is identical. See turning retail footfall into an email list for a retail-specific implementation walkthrough.
Measuring what works
Do not measure email campaigns by open rates alone. Open rates tell you whether your subject line worked. They do not tell you whether the campaign drove revenue.
Because Purple tracks device connections to your WiFi, you can close the loop between email send and venue visit. Send a re-engagement campaign to 1,000 lapsed guests on a Tuesday. Two weeks later, Purple shows you exactly how many of those individuals returned to your venue and connected to the WiFi. That is your true campaign ROI - not a click-through rate, but an actual return visit.
This changes how you optimise. Instead of testing subject lines to improve opens, you test offers to improve return visits. Instead of reporting on click-through rates, you report on revenue per send. These are the metrics that map directly to the business outcomes your board cares about.
Purple has processed 440 million logins in 2024 across 80,000+ live venues (Purple internal data). The patterns in that data are clear: venues that run automated welcome and re-engagement campaigns from their WiFi-captured lists see measurably higher repeat visit rates than those relying on QR code databases alone.
Where to start
- Audit your current capture rate. Count how many emails you capture per week from QR codes. Divide by your weekly footfall. If the number is below 25%, you are leaving contacts on the table.
- Enable the captive portal. Configure your existing hardware to route guest traffic through a branded Purple login page. This is a configuration change, not a hardware replacement.
- Set the mandatory fields. Email address and first name. Add date of birth as optional.
- Add the GDPR checkbox. Unchecked by default. Linked to your privacy policy.
- Connect to your CRM. Automate the data sync so every login flows into your marketing database without manual intervention.
- Launch the welcome automation. A single automated email, sent within 24 hours of a first visit, with a clear return-visit incentive.
- Review after 30 days. Compare your new weekly capture rate to your baseline. The difference is the size of the opportunity you were missing.