diff --git a/src/web/pug/guild.pug b/src/web/pug/guild.pug
index 536ea4c..9f12d38 100644
--- a/src/web/pug/guild.pug
+++ b/src/web/pug/guild.pug
@@ -69,7 +69,11 @@ block body
         .grid--row-start2
           button.s-btn.s-btn__filled.htmx-indicator Invite
     div
-      != svg
+      -
+        let size = 105
+        let p = new URLSearchParams()
+        p.set("data", `https://bridge.cadence.moe/invite?nonce=${nonce}`)
+      img(width=size height=size src=rel(`/qr?${p}`))
 
   h2.mt48.fs-headline1 Moderation
 
diff --git a/src/web/routes/guild.js b/src/web/routes/guild.js
index 5944131..6916d56 100644
--- a/src/web/routes/guild.js
+++ b/src/web/routes/guild.js
@@ -6,7 +6,6 @@ const {H3Event, defineEventHandler, sendRedirect, useSession, createError, getVa
 const {randomUUID} = require("crypto")
 const {LRUCache} = require("lru-cache")
 const Ty = require("../../types")
-const uqr = require("uqr")
 
 const {discord, as, sync, select} = require("../../passthrough")
 /** @type {import("../pug-sync")} */
@@ -94,17 +93,10 @@ as.router.get("/guild", defineEventHandler(async event => {
 	const nonce = randomUUID()
 	validNonce.set(nonce, guild_id)
 
-	const data = `${reg.ooye.bridge_origin}/invite?nonce=${nonce}`
-	// necessary to scale the svg pixel-perfectly on the page
-	// https://github.com/unjs/uqr/blob/244952a8ba2d417f938071b61e11fb1ff95d6e75/src/svg.ts#L24
-	const generatedSvg = uqr.renderSVG(data, {pixelSize: 3})
-	const svg = generatedSvg.replace(/viewBox="0 0 ([0-9]+) ([0-9]+)"/, `data-nonce="${nonce}" width="$1" height="$2" $&`)
-	assert.notEqual(svg, generatedSvg)
-
 	// Unlinked guild
 	if (!row) {
 		const links = getChannelRoomsLinks(guild_id, [])
-		return pugSync.render(event, "guild.pug", {guild, guild_id, svg, ...links})
+		return pugSync.render(event, "guild.pug", {guild, guild_id, nonce, ...links})
 	}
 
 	// Linked guild
@@ -113,7 +105,7 @@ as.router.get("/guild", defineEventHandler(async event => {
 	const banned = await api.getMembers(row.space_id, "ban")
 	const rooms = await api.getFullHierarchy(row.space_id)
 	const links = getChannelRoomsLinks(guild_id, rooms)
-	return pugSync.render(event, "guild.pug", {guild, guild_id, svg, mods, banned, ...links, ...row})
+	return pugSync.render(event, "guild.pug", {guild, guild_id, nonce, mods, banned, ...links, ...row})
 }))
 
 as.router.get("/invite", defineEventHandler(async event => {
diff --git a/src/web/routes/guild.test.js b/src/web/routes/guild.test.js
index 3952d14..f89dfee 100644
--- a/src/web/routes/guild.test.js
+++ b/src/web/routes/guild.test.js
@@ -78,7 +78,7 @@ test("web guild: can view bridged guild", async t => {
 		}
 	})
 	t.match(content, /<h1[^<]*Psychonauts 3/)
-	nonce = content.match(/data-nonce="([a-f0-9-]+)"/)?.[1]
+	nonce = content.match(/nonce%3D([a-f0-9-]+)/)?.[1]
 	t.ok(nonce)
 })
 
diff --git a/src/web/routes/oauth.js b/src/web/routes/oauth.js
index 12c991d..82aebe4 100644
--- a/src/web/routes/oauth.js
+++ b/src/web/routes/oauth.js
@@ -6,7 +6,6 @@ const {defineEventHandler, getValidatedQuery, sendRedirect, getQuery, useSession
 const {SnowTransfer} = require("snowtransfer")
 const DiscordTypes = require("discord-api-types/v10")
 const fetch = require("node-fetch")
-const getRelativePath = require("get-relative-path")
 
 const {as, db} = require("../../passthrough")
 const {id} = require("../../../addbot")
@@ -91,8 +90,8 @@ as.router.get("/oauth", defineEventHandler(async event => {
 	}
 
 	if (parsedQuery.data.guild_id) {
-		return sendRedirect(event, getRelativePath(event.path, `/guild?guild_id=${parsedQuery.data.guild_id}`), 302)
+		return sendRedirect(event, `/guild?guild_id=${parsedQuery.data.guild_id}`, 302)
 	}
 
-	return sendRedirect(event, getRelativePath(event.path, "/"), 302)
+	return sendRedirect(event, "/", 302)
 }))
diff --git a/src/web/routes/qr.js b/src/web/routes/qr.js
new file mode 100644
index 0000000..314b66a
--- /dev/null
+++ b/src/web/routes/qr.js
@@ -0,0 +1,19 @@
+// @ts-check
+
+const {z} = require("zod")
+const {defineEventHandler, getValidatedQuery} = require("h3")
+
+const {as} = require("../../passthrough")
+
+const uqr = require("uqr")
+
+const schema = {
+	qr: z.object({
+		data: z.string().max(128)
+	})
+}
+
+as.router.get("/qr", defineEventHandler(async event => {
+	const {data} = await getValidatedQuery(event, schema.qr.parse)
+	return new Response(uqr.renderSVG(data, {pixelSize: 3}), {headers: {"content-type": "image/svg+xml"}})
+}))
diff --git a/src/web/routes/qr.test.js b/src/web/routes/qr.test.js
new file mode 100644
index 0000000..5b17f87
--- /dev/null
+++ b/src/web/routes/qr.test.js
@@ -0,0 +1,17 @@
+const {test} = require("supertape")
+const {router} = require("../../../test/web")
+const getStream = require("get-stream")
+
+test("web qr: returns svg", async t => {
+	/** @type {Response} */
+	const res = await router.test("get", "/qr?data=hello+world", {
+		params: {
+			server_name: "cadence.moe",
+			media_id: "1"
+		}
+	})
+	t.equal(res.status, 200)
+	t.equal(res.headers.get("content-type"), "image/svg+xml")
+	const content = await getStream(res.body)
+	t.match(content, /<svg/)
+})
diff --git a/src/web/server.js b/src/web/server.js
index 9373947..80d2c10 100644
--- a/src/web/server.js
+++ b/src/web/server.js
@@ -27,6 +27,7 @@ sync.require("./routes/guild-settings")
 sync.require("./routes/guild")
 sync.require("./routes/link")
 sync.require("./routes/oauth")
+sync.require("./routes/qr")
 
 // Files
 
diff --git a/test/test.js b/test/test.js
index 089a0dd..241b7a1 100644
--- a/test/test.js
+++ b/test/test.js
@@ -151,4 +151,5 @@ file._actuallyUploadDiscordFileToMxc = function(url, res) { throw new Error(`Not
 	require("../src/web/routes/download-discord.test")
 	require("../src/web/routes/download-matrix.test")
 	require("../src/web/routes/guild.test")
+	require("../src/web/routes/qr.test")
 })()