diff --git a/packages/api/src/index.ts b/packages/api/src/index.ts
index ddd41b3..3488e4f 100644
--- a/packages/api/src/index.ts
+++ b/packages/api/src/index.ts
@@ -25,6 +25,10 @@ app.use('*', async (c, next) => {
 		origin: allowed,
 		allowMethods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
 		allowHeaders: ['Content-Type', 'Authorization'],
+		// Content-Disposition is not CORS-safelisted, so without this the admin UI
+		// cannot read the filename the CSV endpoints build, and every export saves
+		// under a name the client had to guess instead.
+		exposeHeaders: ['Content-Disposition'],
 		maxAge: 86400,
 	})(c, next);
 });
diff --git a/packages/api/src/routes/projects.ts b/packages/api/src/routes/projects.ts
index 43a484d..7c4168a 100644
--- a/packages/api/src/routes/projects.ts
+++ b/packages/api/src/routes/projects.ts
@@ -1,4 +1,16 @@
-import { and, count, desc, eq, gte, inArray, lt, lte, or } from 'drizzle-orm';
+import {
+	and,
+	asc,
+	count,
+	desc,
+	eq,
+	gt,
+	gte,
+	inArray,
+	lt,
+	lte,
+	or,
+} from 'drizzle-orm';
 import { type Context, Hono } from 'hono';
 import * as z from 'zod';
 import type { HonoEnv } from '../auth';
@@ -44,8 +56,15 @@ const fallbackKey = z
 	.string()
 	.max(FALLBACK_KEY_MAX)
 	.regex(
-		/^$|^[a-z0-9][a-z0-9-]*$/,
-		'Use lowercase letters, digits and hyphens only',
+		// Underscore is allowed because social handles use it — the X account is
+		// x.com/nut_fes — and it costs nothing to carry: `_` is unreserved in RFC
+		// 3986, so encodeURIComponent leaves it alone, and the QR payload is
+		// already in byte mode (lowercase letters are absent from QR's
+		// alphanumeric set), so it is the same 8 bits as any other character.
+		// Hyphen stays last in the class: `[a-z0-9-_]` would read `9-_` as a range
+		// and quietly admit uppercase and punctuation.
+		/^$|^[a-z0-9][a-z0-9_-]*$/,
+		'Use lowercase letters, digits, hyphens and underscores only',
 	);
 
 const createProjectBodySchema = z.object({
@@ -132,6 +151,40 @@ function denyUnlessPermitted(
 
 const projectsApp = new Hono<HonoEnv>();
 
+/**
+ * Scan counts for the QR codes on one page, as `{ [qrId]: count }`.
+ *
+ * Scoped to the ids being rendered, never the whole table — the same rule the
+ * project list follows. It costs one query backed by idx_access_logs_qr_id, and
+ * the rows it scans are only those belonging to the visible codes.
+ *
+ * ## Why this is counted rather than stored
+ *
+ * A `QRCodes.scan_count` column incremented on every redirect would make this
+ * free to display, but it would add a second D1 write per scan. On the Free plan
+ * writes are the binding limit (100k/day) while reads are not (5M/day) — so
+ * caching the count in a column would halve the number of scans the event can
+ * record in order to save a resource there is 50x more of. Wrong direction.
+ *
+ * Cost, for the record: reads scale with (logs belonging to the visible codes) x
+ * (page views). At 20k logs all belonging to one page that is 20k rows per view,
+ * i.e. ~250 views/day against the quota — fine for an admin screen, and the
+ * reason this is not wired to a poll or a keystroke.
+ */
+async function scanCountsByQrId(
+	db: ReturnType<typeof getDb>,
+	qrIds: string[],
+): Promise<Record<string, number>> {
+	if (qrIds.length === 0) return {};
+	const rows = await db
+		.select({ qrId: schema.accessLogs.qrId, scanCount: count() })
+		.from(schema.accessLogs)
+		.where(inArray(schema.accessLogs.qrId, qrIds))
+		.groupBy(schema.accessLogs.qrId)
+		.all();
+	return Object.fromEntries(rows.map((row) => [row.qrId, row.scanCount]));
+}
+
 // GET /projects/qrcodes — paginated QR codes across every project
 projectsApp.get('/qrcodes', async (c) => {
 	const denied = denyUnlessPermitted(
@@ -153,7 +206,17 @@ projectsApp.get('/qrcodes', async (c) => {
 			.all(),
 		db.select({ total: count() }).from(schema.qrCodes),
 	]);
-	return c.json({ data: qrCodes, total: totalRows[0]?.total ?? 0 });
+	const scanCounts = await scanCountsByQrId(
+		db,
+		qrCodes.map((qr) => qr.id),
+	);
+	return c.json({
+		data: qrCodes.map((qr) => ({
+			...qr,
+			scanCount: scanCounts[qr.id] ?? 0,
+		})),
+		total: totalRows[0]?.total ?? 0,
+	});
 });
 
 // GET /projects/qrcodes/:id — a single QR code
@@ -451,7 +514,17 @@ projectsApp.get('/:id/qrcodes', async (c) => {
 			.from(schema.qrCodes)
 			.where(eq(schema.qrCodes.projectId, projectId)),
 	]);
-	return c.json({ data: qrCodes, total: totalRows[0]?.total ?? 0 });
+	const scanCounts = await scanCountsByQrId(
+		db,
+		qrCodes.map((qr) => qr.id),
+	);
+	return c.json({
+		data: qrCodes.map((qr) => ({
+			...qr,
+			scanCount: scanCounts[qr.id] ?? 0,
+		})),
+		total: totalRows[0]?.total ?? 0,
+	});
 });
 
 // GET /projects/:id/access-logs — paginated, newest-first raw access log
@@ -536,6 +609,247 @@ function normalizeBound(value: string, edge: 'start' | 'end'): string {
 	return edge === 'start' ? `${value}T00:00:00.000Z` : `${value}T23:59:59.999Z`;
 }
 
+/**
+ * Most projects one request may combine.
+ *
+ * Bounds the `IN (...)` list, but the limit that matters is CSV_MAX_ROWS below,
+ * which is applied to the *combined* total rather than per project — otherwise
+ * ticking ten boxes would authorise ten times the row budget in a single click,
+ * and on the Free plan that is 10% of the daily read quota gone at once.
+ */
+const MAX_CSV_PROJECTS = 50;
+
+const bulkCsvQuerySchema = csvQuerySchema.extend({
+	// Comma-separated so the whole thing stays a GET: the browser has to navigate
+	// to it (or fetch and save a blob) and a POST cannot be a plain download.
+	projectIds: z
+		.string()
+		.min(1)
+		.max(MAX_CSV_PROJECTS * 40),
+});
+
+// GET /projects/access-logs/csv?projectIds=a,b,c — one CSV covering several
+// projects, for the checkbox selection in the admin UI.
+//
+// Two path segments, so it cannot be swallowed by `/:id` (one segment) or by
+// `/qrcodes/:id` (first segment is literal).
+projectsApp.get('/access-logs/csv', async (c) => {
+	const denied = denyUnlessPermitted(
+		c,
+		Permissions.TRACKING_LINK_ANALYTICS,
+		'TRACKING_LINK_ANALYTICS',
+	);
+	if (denied) return denied;
+
+	if (!isFlagEnabled(c.env.CSV_EXPORT_ENABLED)) {
+		return fail(c, 403, ErrorCodes.CSV_EXPORT_DISABLED);
+	}
+
+	const parsedQuery = bulkCsvQuerySchema.safeParse(c.req.query());
+	if (!parsedQuery.success) {
+		return fail(c, 400, ErrorCodes.INVALID_BODY, {
+			details: parsedQuery.error.flatten(),
+		});
+	}
+
+	const projectIds = [
+		...new Set(
+			parsedQuery.data.projectIds
+				.split(',')
+				.map((value) => value.trim())
+				.filter(Boolean),
+		),
+	];
+	if (projectIds.length === 0) {
+		return fail(c, 400, ErrorCodes.INVALID_BODY, {
+			details: { formErrors: ['projectIds is empty'], fieldErrors: {} },
+		});
+	}
+	if (projectIds.length > MAX_CSV_PROJECTS) {
+		return fail(c, 400, ErrorCodes.INVALID_BODY, {
+			meta: { count: projectIds.length, max: MAX_CSV_PROJECTS },
+		});
+	}
+
+	const from = parsedQuery.data.from
+		? normalizeBound(parsedQuery.data.from, 'start')
+		: undefined;
+	const to = parsedQuery.data.to
+		? normalizeBound(parsedQuery.data.to, 'end')
+		: undefined;
+
+	const db = getDb(c.env.DB);
+	const rangeFilter = and(
+		inArray(schema.accessLogs.projectId, projectIds),
+		...(from ? [gte(schema.accessLogs.accessedAt, from)] : []),
+		...(to ? [lte(schema.accessLogs.accessedAt, to)] : []),
+	);
+
+	const [projects, countRows] = await Promise.all([
+		db
+			.select({
+				projectId: schema.projects.projectId,
+				name: schema.projects.name,
+			})
+			.from(schema.projects)
+			.where(inArray(schema.projects.projectId, projectIds))
+			.all(),
+		db.select({ total: count() }).from(schema.accessLogs).where(rangeFilter),
+	]);
+	// Every id has to exist. Silently skipping unknown ones would produce a file
+	// that looks complete but is missing a project the user ticked.
+	if (projects.length !== projectIds.length) {
+		return fail(c, 404, ErrorCodes.PROJECT_NOT_FOUND, {
+			meta: {
+				requested: projectIds.length,
+				found: projects.length,
+			},
+		});
+	}
+	const projectNames = Object.fromEntries(
+		projects.map((project) => [project.projectId, project.name]),
+	);
+
+	const maxRows =
+		Number(c.env.CSV_MAX_ROWS ?? DEFAULT_MAX_CSV_ROWS) || DEFAULT_MAX_CSV_ROWS;
+	const total = countRows[0]?.total ?? 0;
+	if (total > maxRows) {
+		return fail(c, 413, ErrorCodes.TOO_MANY_ROWS, {
+			meta: { total, max: maxRows },
+		});
+	}
+
+	// プロジェクト leads, because in a combined file it is the column that says
+	// which project a row belongs to — the single-project export has no need of it.
+	const header = [
+		'プロジェクト',
+		'日時',
+		'名前',
+		'媒体',
+		'場所',
+		'ボット',
+		'User Agent',
+		'IPアドレス',
+	];
+	const encoder = new TextEncoder();
+	// Ordered by project first, then time descending within each project. Not a
+	// global chronological sort: the only index available is
+	// (project_id, accessed_at DESC), and ordering across projects by time alone
+	// would force SQLite to sort the whole matched set in memory — 50k rows of that
+	// inside a Worker is how you hit the 10ms CPU limit. Grouping by project also
+	// happens to be the more useful layout in a spreadsheet.
+	let cursor: { projectId: string; accessedAt: string; id: number } | null =
+		null;
+	let done = false;
+
+	const stream = new ReadableStream<Uint8Array>({
+		start(controller) {
+			controller.enqueue(encoder.encode(`${toCsvRow(header)}\r\n`));
+		},
+		async pull(controller) {
+			if (done) {
+				controller.close();
+				return;
+			}
+			const rows = await db
+				.select({
+					id: schema.accessLogs.id,
+					projectId: schema.accessLogs.projectId,
+					accessedAt: schema.accessLogs.accessedAt,
+					isBot: schema.accessLogs.isBot,
+					userAgent: schema.accessLogs.userAgent,
+					ipAddress: schema.accessLogs.ipAddress,
+					name: schema.qrCodes.name,
+					medium: schema.qrCodes.medium,
+					location: schema.qrCodes.location,
+				})
+				.from(schema.accessLogs)
+				.leftJoin(schema.qrCodes, eq(schema.accessLogs.qrId, schema.qrCodes.id))
+				.where(
+					cursor
+						? and(
+								rangeFilter,
+								// Three-column keyset matching the ORDER BY exactly: advance to
+								// a later project, or stay in this one and move back in time.
+								or(
+									gt(schema.accessLogs.projectId, cursor.projectId),
+									and(
+										eq(schema.accessLogs.projectId, cursor.projectId),
+										or(
+											lt(schema.accessLogs.accessedAt, cursor.accessedAt),
+											and(
+												eq(schema.accessLogs.accessedAt, cursor.accessedAt),
+												lt(schema.accessLogs.id, cursor.id),
+											),
+										),
+									),
+								),
+							)
+						: rangeFilter,
+				)
+				.orderBy(
+					asc(schema.accessLogs.projectId),
+					desc(schema.accessLogs.accessedAt),
+					desc(schema.accessLogs.id),
+				)
+				.limit(CSV_PAGE_SIZE)
+				.all();
+
+			if (rows.length === 0) {
+				controller.close();
+				return;
+			}
+
+			controller.enqueue(
+				encoder.encode(
+					`${rows
+						.map((log) =>
+							toCsvRow([
+								projectNames[log.projectId] ?? '',
+								log.accessedAt,
+								log.name ?? '',
+								log.medium ?? '',
+								log.location ?? '',
+								log.isBot ? '1' : '0',
+								log.userAgent ?? '',
+								log.ipAddress ?? '',
+							]),
+						)
+						.join('\r\n')}\r\n`,
+				),
+			);
+
+			const last = rows[rows.length - 1];
+			cursor = {
+				projectId: last.projectId,
+				accessedAt: last.accessedAt,
+				id: last.id,
+			};
+			if (rows.length < CSV_PAGE_SIZE) done = true;
+		},
+	});
+
+	return new Response(stream, {
+		status: 200,
+		headers: {
+			'Content-Type': 'text/csv; charset=utf-8',
+			'Content-Disposition': contentDisposition(
+				// Requested order, not the order the IN(...) happened to return: the
+				// filename names the first project and counts the rest, and SQLite
+				// answers in rowid order, so without this the file gets named after
+				// whichever selected project is oldest rather than the one at the top
+				// of the user's selection.
+				bulkCsvFilename(
+					projectIds.map((id) => projectNames[id] ?? ''),
+					from,
+					to,
+				),
+			),
+			'Cache-Control': 'no-store',
+		},
+	});
+});
+
 // GET /projects/:id/access-logs/csv — access log as a streamed CSV download.
 // Gated by CSV_EXPORT_ENABLED so it can ship disabled and be turned on later.
 projectsApp.get('/:id/access-logs/csv', async (c) => {
@@ -695,6 +1009,27 @@ projectsApp.get('/:id/access-logs/csv', async (c) => {
 	});
 });
 
+/**
+ * `アクセスログ_造形大祭2026ほか3件_2026-07-25.csv` for a multi-project export.
+ *
+ * Names the first project and counts the rest rather than joining them all: five
+ * Japanese project names concatenated overruns what a downloads folder will show,
+ * and the file already carries a プロジェクト column for the detail. A selection of
+ * one is named exactly as the single-project export would name it, so ticking one
+ * box and using the per-row button give the same file.
+ */
+function bulkCsvFilename(
+	projectNames: string[],
+	from?: string,
+	to?: string,
+): string {
+	const [first, ...rest] = projectNames;
+	const label = rest.length
+		? `${first ?? ''}ほか${rest.length}件`
+		: (first ?? 'project');
+	return csvFilename(label, from, to);
+}
+
 /** `アクセスログ_造形大祭2026_2026-07-25.csv`, sanitised for a filesystem. */
 function csvFilename(projectName: string, from?: string, to?: string): string {
 	const safeName =
diff --git a/packages/api/wrangler.jsonc b/packages/api/wrangler.jsonc
index 982de01..1b04929 100644
--- a/packages/api/wrangler.jsonc
+++ b/packages/api/wrangler.jsonc
@@ -61,7 +61,16 @@
 		// outage rather than during one.
 		"FALLBACK_DESTINATIONS": {
 			"instagram": "https://www.instagram.com/nutfes?igsh=MTB1eXhpcWJ4YnQ0cA==",
-			"web": "https://www.nutfes.net/"
+			"web": "https://www.nutfes.net/",
+			// X is listed under two keys on purpose. "x" is what the admin UI derives
+			// from the host x.com, so it is the keyword a project gets if the field is
+			// left blank; "nut_fes" is the handle, which is what someone naming the
+			// keyword by hand reaches for. An unmatched keyword would silently send
+			// scans to FALLBACK_URL instead — exactly the case this map exists to
+			// prevent — and a spare entry costs nothing. Drop one once the projects
+			// are set up and you know which is in use.
+			"x": "https://x.com/nut_fes",
+			"nut_fes": "https://x.com/nut_fes"
 		}
 	}
 	// Secrets (set with `wrangler secret put <NAME>`, never committed):
diff --git a/packages/web/src/hooks/useFieldErrors.test.ts b/packages/web/src/hooks/useFieldErrors.test.ts
new file mode 100644
index 0000000..fdcda96
--- /dev/null
+++ b/packages/web/src/hooks/useFieldErrors.test.ts
@@ -0,0 +1,82 @@
+import { describe, expect, it } from 'vitest';
+import { validateFallbackKey, validateHttpUrl } from './useFieldErrors';
+
+/**
+ * The fallback keyword is printed into QR codes, so the set of characters
+ * accepted here has to match the API's exactly — a key the form accepts but the
+ * API rejects is a save that fails after the user has already decided.
+ */
+describe('validateFallbackKey', () => {
+	const ok = (value: string) => expect(validateFallbackKey(value)).toBeNull();
+	const rejected = (value: string) =>
+		expect(validateFallbackKey(value)).toBe('validation.fallbackKey');
+
+	it('accepts underscores, which social handles need', () => {
+		// The X account is x.com/nut_fes.
+		ok('nut_fes');
+		ok('a_b_c');
+	});
+
+	it('accepts the existing keywords', () => {
+		ok('instagram');
+		ok('web');
+		ok('x');
+		ok('my-shop');
+		ok('a1');
+	});
+
+	// The character class must be written [a-z0-9_-] with the hyphen last.
+	// [a-z0-9-_] parses `9-_` as a range spanning ':' through '_', which would
+	// wave through uppercase and punctuation.
+	it('still rejects everything outside the class', () => {
+		for (const value of [
+			'A',
+			'Insta',
+			'a b',
+			'a.b',
+			'a:b',
+			'a@b',
+			'a^b',
+			'@',
+		]) {
+			rejected(value);
+		}
+	});
+
+	it('requires an alphanumeric first character', () => {
+		rejected('_leading');
+		rejected('-leading');
+		// Trailing is fine — only the first character is constrained.
+		ok('trailing_');
+		ok('trailing-');
+	});
+
+	it('rejects an empty value', () => {
+		// The field is optional, but blank is handled by not validating at all;
+		// reaching here with '' means a required-field rule was expected.
+		rejected('');
+	});
+
+	it('rejects non-ASCII, which would inflate the printed QR', () => {
+		rejected('インスタ');
+	});
+});
+
+describe('validateHttpUrl', () => {
+	it('accepts http and https', () => {
+		expect(validateHttpUrl('https://x.com/nut_fes')).toBeNull();
+		expect(validateHttpUrl('http://example.com')).toBeNull();
+	});
+
+	// zod's .url() accepts these, which is how they became a stored-XSS route.
+	it('rejects other schemes', () => {
+		for (const value of [
+			'javascript:alert(1)',
+			'data:text/html,<script>',
+			'file:///etc/passwd',
+			'not a url',
+		]) {
+			expect(validateHttpUrl(value)).not.toBeNull();
+		}
+	});
+});
diff --git a/packages/web/src/hooks/useFieldErrors.ts b/packages/web/src/hooks/useFieldErrors.ts
index 16fe238..7d2e20d 100644
--- a/packages/web/src/hooks/useFieldErrors.ts
+++ b/packages/web/src/hooks/useFieldErrors.ts
@@ -72,14 +72,19 @@ export function useFieldErrors() {
 }
 
 /**
- * Mirrors the API's fallback-key rule (`^[a-z0-9][a-z0-9-]*$`).
+ * Mirrors the API's fallback-key rule (`^[a-z0-9][a-z0-9_-]*$`).
  *
  * ASCII-only is not arbitrary: the keyword is percent-encoded into the printed QR
  * payload, and a Japanese character costs 9 bytes there — enough to grow the
- * symbol from 57x57 to 61x61 modules.
+ * symbol from 57x57 to 61x61 modules. Underscore is fine by that measure (it is
+ * unreserved in RFC 3986, so it is never percent-encoded) and social handles
+ * need it.
+ *
+ * Keep the hyphen last in the character class — `[a-z0-9-_]` parses `9-_` as a
+ * range and would accept uppercase and punctuation.
  */
 export function validateFallbackKey(value: string): string | null {
-	return /^[a-z0-9][a-z0-9-]*$/.test(value) ? null : 'validation.fallbackKey';
+	return /^[a-z0-9][a-z0-9_-]*$/.test(value) ? null : 'validation.fallbackKey';
 }
 
 /** Shared http(s) check, mirroring the API's protocol allow-list. */
diff --git a/packages/web/src/lib/download.ts b/packages/web/src/lib/download.ts
index 9bf35fc..8b54b9f 100644
--- a/packages/web/src/lib/download.ts
+++ b/packages/web/src/lib/download.ts
@@ -12,6 +12,37 @@
  * Safari, where it tends to navigate in-tab instead of saving and so destroys the
  * dialog state behind it.
  */
+/**
+ * Reads the filename the server chose out of Content-Disposition.
+ *
+ * Needed because `fetch` + blob saves under whatever name the client passes, so
+ * the header the API carefully builds is otherwise thrown away. The server is the
+ * only side that knows the full picture for a combined export — how many projects
+ * were included and what date range came back — so it should win.
+ *
+ * Prefers the RFC 5987 `filename*=UTF-8''…` form over the ASCII `filename="…"`
+ * fallback, which is the whole reason the API sends both: the fallback has every
+ * Japanese character replaced with an underscore.
+ *
+ * Returns null rather than guessing, so the caller keeps its own default.
+ */
+export function filenameFromResponse(response: Response): string | null {
+	const header = response.headers.get('Content-Disposition');
+	if (!header) return null;
+
+	const utf8 = /filename\*\s*=\s*UTF-8''([^;]+)/i.exec(header);
+	if (utf8?.[1]) {
+		try {
+			return decodeURIComponent(utf8[1].trim()) || null;
+		} catch {
+			// Malformed percent-encoding: fall through to the ASCII form.
+		}
+	}
+
+	const ascii = /filename\s*=\s*"([^"]*)"/i.exec(header);
+	return ascii?.[1]?.trim() || null;
+}
+
 export function downloadBlob(blob: Blob, filename: string): void {
 	const url = URL.createObjectURL(blob);
 	const anchor = document.createElement('a');
diff --git a/packages/web/src/lib/i18n.tsx b/packages/web/src/lib/i18n.tsx
index bde9dc7..f2c391e 100644
--- a/packages/web/src/lib/i18n.tsx
+++ b/packages/web/src/lib/i18n.tsx
@@ -69,7 +69,7 @@ const en: Dictionary = {
 	'validation.tooLong': 'Please use {max} characters or fewer.',
 	'validation.url': 'Enter a URL starting with http:// or https://',
 	'validation.fallbackKey':
-		'Use lowercase letters, digits and hyphens only, starting with a letter or digit.',
+		'Use lowercase letters, digits, hyphens and underscores only, starting with a letter or digit.',
 
 	'login.sessionExpired': 'Your session expired. Please sign in again.',
 	'login.retryAfterNetwork':
@@ -128,6 +128,10 @@ const en: Dictionary = {
 	'projects.fallbackKeyOrphanedOption': '{key} (not in the configuration)',
 	'projects.fallbackKeyListUnavailable':
 		'Could not load the configured destinations. Enter the keyword manually.',
+	'projects.selectFor': 'Include {name} in the CSV export',
+	'projects.selectAllOnPage': 'Select all on this page',
+	'projects.selectedCount': '{count} selected',
+	'projects.downloadSelectedCsv': 'Download selected as CSV',
 
 	'createProject.heading': 'New project',
 	'createProject.subtitle': 'Create a new TrackingLink project',
@@ -170,6 +174,12 @@ const en: Dictionary = {
 	'qrCodes.scanUrlLabel': 'This code links to',
 	'qrCodes.generateFailed': 'Failed to generate the QR code',
 	'qrCodes.downloadButton': 'Download PNG',
+	'qrCodes.scanCount': '{count} scans',
+	'qrCodes.scanCountTitle': 'Scans recorded for this code',
+	'qrCodes.captionLegend': 'Text printed under the code',
+	'qrCodes.captionHint': 'Printed under the code in the downloaded PNG.',
+	'qrCodes.captionHintNone':
+		'The downloaded PNG will contain the code only, with no text.',
 
 	'csvExport.downloadFailed': 'Failed to download the CSV',
 	'csvExport.disabled': 'CSV export is not enabled yet',
@@ -230,7 +240,7 @@ const ja: Dictionary = {
 	'validation.tooLong': '{max}文字以内で入力してください。',
 	'validation.url': 'http:// または https:// で始まるURLを入力してください。',
 	'validation.fallbackKey':
-		'半角の英小文字・数字・ハイフンのみ、先頭は英数字で入力してください。',
+		'半角の英小文字・数字・ハイフン・アンダーバーのみ、先頭は英数字で入力してください。',
 
 	'login.sessionExpired':
 		'セッションの有効期限が切れました。再度ログインしてください。',
@@ -290,6 +300,10 @@ const ja: Dictionary = {
 	'projects.fallbackKeyOrphanedOption': '{key}(設定にありません)',
 	'projects.fallbackKeyListUnavailable':
 		'設定されている転送先を読み込めませんでした。キーワードを手で入力してください。',
+	'projects.selectFor': '{name} をCSV出力に含める',
+	'projects.selectAllOnPage': 'このページを全選択',
+	'projects.selectedCount': '{count} 件選択中',
+	'projects.downloadSelectedCsv': '選択分をCSVでDL',
 
 	'createProject.heading': 'プロジェクト作成',
 	'createProject.subtitle': '新しいTrackingLinkプロジェクトを作成します。',
@@ -332,6 +346,12 @@ const ja: Dictionary = {
 	'qrCodes.scanUrlLabel': 'このコードの転送先',
 	'qrCodes.generateFailed': 'QRコードの生成に失敗しました',
 	'qrCodes.downloadButton': 'PNGをダウンロード',
+	'qrCodes.scanCount': '{count} 回',
+	'qrCodes.scanCountTitle': 'このQRコードのアクセス数',
+	'qrCodes.captionLegend': 'QRコードの下に入れる文字',
+	'qrCodes.captionHint': 'ダウンロードするPNGのQRコードの下に印字されます。',
+	'qrCodes.captionHintNone':
+		'ダウンロードするPNGにはQRコードだけが入り、文字は入りません。',
 
 	'csvExport.downloadFailed': 'CSVのダウンロードに失敗しました',
 	'csvExport.disabled': 'CSVダウンロード機能は現在無効です',
diff --git a/packages/web/src/lib/qr.test.ts b/packages/web/src/lib/qr.test.ts
index ba9c7ba..5dcc74a 100644
--- a/packages/web/src/lib/qr.test.ts
+++ b/packages/web/src/lib/qr.test.ts
@@ -1,5 +1,11 @@
 import { describe, expect, it } from 'vitest';
-import { deriveFallbackKey, qrTargetUrl } from './qr';
+import {
+	QR_CAPTION_DEFAULTS,
+	deriveFallbackKey,
+	qrCaptionLines,
+	qrPngFileName,
+	qrTargetUrl,
+} from './qr';
 
 /**
  * These two functions decide what gets physically printed. A mistake here is not
@@ -20,10 +26,23 @@ describe('deriveFallbackKey', () => {
 	});
 
 	it('lowercases and strips characters the API would reject', () => {
-		// The API accepts ^[a-z0-9][a-z0-9-]*$, so a suggestion that fails validation
-		// would be a self-inflicted form error.
-		expect(deriveFallbackKey('https://WWW.Insta_Gram.com/')).toBe('instagram');
+		// The API accepts ^[a-z0-9][a-z0-9_-]*$, so a suggestion that fails
+		// validation would be a self-inflicted form error.
+		expect(deriveFallbackKey('https://WWW.Insta_Gram.com/')).toBe('insta_gram');
 		expect(deriveFallbackKey('https://my-shop.example.com/')).toBe('my-shop');
+		expect(deriveFallbackKey('https://Insta!Gram.com/')).toBe('instagram');
+	});
+
+	// The X account is x.com/nut_fes: the handle carries the underscore, but the
+	// key is derived from the host, so it comes out as plain "x".
+	it('derives "x" for the X account', () => {
+		expect(deriveFallbackKey('https://x.com/nut_fes')).toBe('x');
+	});
+
+	it('does not leave a leading hyphen or underscore', () => {
+		// The rule requires an alphanumeric first character.
+		expect(deriveFallbackKey('https://_foo.example.com/')).toBe('foo');
+		expect(deriveFallbackKey('https://-foo.example.com/')).toBe('foo');
 	});
 
 	it('returns empty for anything unparseable rather than throwing', () => {
@@ -58,3 +77,97 @@ describe('qrTargetUrl', () => {
 		expect(qrTargetUrl('abc', 'a b')).toContain('&p=a%20b');
 	});
 });
+
+describe('qrCaptionLines', () => {
+	const qr = { name: 'Poster A', medium: 'Poster', location: '1F' };
+
+	it('prints nothing by default', () => {
+		expect(QR_CAPTION_DEFAULTS).toEqual({
+			includeName: false,
+			includeMedium: false,
+		});
+		expect(qrCaptionLines(qr, QR_CAPTION_DEFAULTS)).toEqual([]);
+	});
+
+	it('prints only the name when only the name is selected', () => {
+		expect(
+			qrCaptionLines(qr, { includeName: true, includeMedium: false }),
+		).toEqual([{ text: 'Poster A', emphasis: true }]);
+	});
+
+	it('carries the location along with the medium', () => {
+		expect(
+			qrCaptionLines(qr, { includeName: false, includeMedium: true }),
+		).toEqual([{ text: 'Poster · 1F' }]);
+	});
+
+	// Emphasis follows the field, not the line's position — otherwise a
+	// medium-only caption would print bold and read as a title.
+	it('never emphasises the medium, even when it is the only line', () => {
+		const [line] = qrCaptionLines(qr, {
+			includeName: false,
+			includeMedium: true,
+		});
+		expect(line?.emphasis).toBeUndefined();
+	});
+
+	it('puts the name first when both are selected', () => {
+		expect(
+			qrCaptionLines(qr, { includeName: true, includeMedium: true }),
+		).toEqual([{ text: 'Poster A', emphasis: true }, { text: 'Poster · 1F' }]);
+	});
+
+	it('omits the separator when there is no location', () => {
+		expect(
+			qrCaptionLines(
+				{ name: 'A', medium: 'Poster' },
+				{ includeName: false, includeMedium: true },
+			),
+		).toEqual([{ text: 'Poster' }]);
+	});
+
+	// location is optional and may come back as null from the API.
+	it('treats a null location as absent', () => {
+		expect(
+			qrCaptionLines(
+				{ name: 'A', medium: 'Poster', location: null },
+				{ includeName: false, includeMedium: true },
+			),
+		).toEqual([{ text: 'Poster' }]);
+	});
+
+	it('emits no line for a selected but empty field', () => {
+		expect(
+			qrCaptionLines(
+				{ name: '', medium: '', location: '' },
+				{ includeName: true, includeMedium: true },
+			),
+		).toEqual([]);
+	});
+});
+
+describe('qrPngFileName', () => {
+	it('is "<name>_QR.png"', () => {
+		expect(qrPngFileName('造形大ポスター')).toBe('造形大ポスター_QR.png');
+	});
+
+	// The medium and location were dropped from the filename on purpose.
+	it('carries the name only', () => {
+		expect(qrPngFileName('看板A')).toBe('看板A_QR.png');
+	});
+
+	it('collapses whitespace rather than leaving it in the path', () => {
+		expect(qrPngFileName('造形大　ポスター')).toBe('造形大_ポスター_QR.png');
+	});
+
+	it('strips characters no filesystem accepts', () => {
+		expect(qrPngFileName('a/b:c*d')).toBe('abcd_QR.png');
+	});
+
+	// name is required by the API, so this is defence rather than a real case —
+	// but a leading underscore would look like a broken filename.
+	it('does not leave a stray separator when the name is blank', () => {
+		expect(qrPngFileName('')).toBe('QR.png');
+		expect(qrPngFileName('///')).toBe('QR.png');
+	});
+});
diff --git a/packages/web/src/lib/qr.ts b/packages/web/src/lib/qr.ts
index 3b25825..0f3dfd1 100644
--- a/packages/web/src/lib/qr.ts
+++ b/packages/web/src/lib/qr.ts
@@ -1,5 +1,6 @@
 import QRCodeLib from 'qrcode';
 import { TRACKING_LINK_API_URL } from '../config';
+import { slugForFilename } from './format';
 
 /**
  * Base URL that scanned QR codes resolve against. Separate from the API URL
@@ -40,11 +41,17 @@ export function deriveFallbackKey(destinationUrl: string): string {
 	}
 
 	const label = host.replace(/^www\./i, '').split('.')[0] ?? '';
-	return label
-		.toLowerCase()
-		.replace(/[^a-z0-9-]/g, '')
-		.replace(/^-+/, '')
-		.slice(0, FALLBACK_KEY_MAX);
+	return (
+		label
+			.toLowerCase()
+			// Keep exactly the characters the API accepts, so a suggestion can never
+			// fail the form's own validation. Hyphen last in the class: `[^a-z0-9-_]`
+			// would read `9-_` as a range.
+			.replace(/[^a-z0-9_-]/g, '')
+			// The rule requires an alphanumeric first character.
+			.replace(/^[-_]+/, '')
+			.slice(0, FALLBACK_KEY_MAX)
+	);
 }
 
 /**
@@ -65,6 +72,23 @@ export function qrTargetUrl(qrId: string, fallbackKey = ''): string {
 	return fallbackKey ? `${base}&p=${encodeURIComponent(fallbackKey)}` : base;
 }
 
+/**
+ * Filename for a downloaded QR code PNG: `<name>_QR.png`.
+ *
+ * Only the name goes in. The medium and location were in here as well, which
+ * buried the one part anyone actually scans a folder for behind two fields that
+ * repeat across most codes.
+ *
+ * Extracted rather than inlined for the same reason as qrTargetUrl: a bulk-print
+ * view will need exactly this, and the two must not drift.
+ */
+export function qrPngFileName(name: string): string {
+	// 'QR' is passed as a part rather than appended, so the separator collapsing
+	// in slugForFilename applies to it too — a blank name gives "QR.png", not
+	// "_QR.png".
+	return `${slugForFilename(name, 'QR')}.png`;
+}
+
 /** On-screen preview. */
 export function qrPreviewDataUrl(text: string): Promise<string> {
 	return QRCodeLib.toDataURL(text, {
@@ -79,6 +103,64 @@ const PNG_PADDING = 32;
 const CAPTION_LINE_HEIGHT = 34;
 const CAPTION_FONT_SIZE = 24;
 
+/** One printed line beneath the QR code. */
+export interface QrCaptionLine {
+	text: string;
+	/** Rendered bold. Reserved for the name — see qrCaptionLines. */
+	emphasis?: boolean;
+}
+
+/** Which of the two required fields get printed under the code. */
+export interface QrCaptionOptions {
+	includeName: boolean;
+	includeMedium: boolean;
+}
+
+/**
+ * Nothing is printed unless asked for.
+ *
+ * A caption is only wanted when the sheet is one of many being sorted by hand;
+ * for a poster that already carries its own design, text under the code is
+ * clutter someone has to crop off. Defaulting to off makes the clean version the
+ * one you get without thinking about it.
+ */
+export const QR_CAPTION_DEFAULTS: QrCaptionOptions = {
+	includeName: false,
+	includeMedium: false,
+};
+
+/**
+ * Builds the caption for a QR code PNG from the two required fields.
+ *
+ * `location` is optional and has no toggle of its own: it qualifies the medium
+ * ("Poster · 1F bulletin board") and shares its line, so it follows the medium's
+ * checkbox. A location with no medium to attach to would read as a stray
+ * fragment on a printed sheet.
+ *
+ * Split out of the dialog so the mapping from checkboxes to printed lines can be
+ * tested without a canvas.
+ */
+export function qrCaptionLines(
+	qr: { name: string; medium: string; location?: string | null },
+	options: QrCaptionOptions,
+): QrCaptionLine[] {
+	const lines: QrCaptionLine[] = [];
+
+	// The name is what someone reads from across a corridor, so it takes the bold
+	// weight — but only ever the name. Emphasis is tied to the field, not to the
+	// position, or a medium-only caption would print in bold and read as a title.
+	if (options.includeName && qr.name) {
+		lines.push({ text: qr.name, emphasis: true });
+	}
+
+	if (options.includeMedium) {
+		const text = [qr.medium, qr.location].filter(Boolean).join(' · ');
+		if (text) lines.push({ text });
+	}
+
+	return lines;
+}
+
 /** Shortens a caption line to fit the image width, with an ellipsis. */
 function fitText(
 	ctx: CanvasRenderingContext2D,
@@ -100,16 +182,17 @@ function fitText(
 }
 
 /**
- * Renders a QR code to a PNG with its name, medium and location printed beneath.
+ * Renders a QR code to a PNG, optionally with a caption printed beneath.
  *
- * The caption is the point. One QR code is generated per physical item, and the
- * downloaded PNG used to carry no identifying text at all — so once printed,
- * nobody could tell which poster a given sheet belonged to. The filename helps in
- * a folder; only the caption helps on paper.
+ * One QR code is generated per physical item, so on paper the caption is the only
+ * thing that says which item a given sheet belongs to — the filename only helps
+ * while it is still in a folder. It is opt-in nonetheless: see
+ * QR_CAPTION_DEFAULTS. With no lines the output is just the code on white, which
+ * is what a designer placing it into a poster wants.
  */
 export async function qrPngBlob(
 	text: string,
-	captionLines: string[],
+	captionLines: QrCaptionLine[] = [],
 ): Promise<Blob> {
 	const qrCanvas = document.createElement('canvas');
 	await QRCodeLib.toCanvas(qrCanvas, text, {
@@ -118,7 +201,7 @@ export async function qrPngBlob(
 		errorCorrectionLevel: 'H',
 	});
 
-	const lines = captionLines.filter(Boolean);
+	const lines = captionLines.filter((line) => line.text);
 	const canvas = document.createElement('canvas');
 	canvas.width = qrCanvas.width + PNG_PADDING * 2;
 	canvas.height =
@@ -141,11 +224,9 @@ export async function qrPngBlob(
 		ctx.textBaseline = 'top';
 		const maxWidth = canvas.width - PNG_PADDING * 2;
 		let y = qrCanvas.height + PNG_PADDING + PNG_PADDING / 2;
-		for (const [index, line] of lines.entries()) {
-			// First line is the name, and it is what someone reads from across a
-			// corridor — so it gets the bold weight.
-			ctx.font = `${index === 0 ? '600 ' : ''}${CAPTION_FONT_SIZE}px system-ui, sans-serif`;
-			ctx.fillText(fitText(ctx, line, maxWidth), canvas.width / 2, y);
+		for (const line of lines) {
+			ctx.font = `${line.emphasis ? '600 ' : ''}${CAPTION_FONT_SIZE}px system-ui, sans-serif`;
+			ctx.fillText(fitText(ctx, line.text, maxWidth), canvas.width / 2, y);
 			y += CAPTION_LINE_HEIGHT;
 		}
 	}
diff --git a/packages/web/src/pages/ManageProjectsPage.tsx b/packages/web/src/pages/ManageProjectsPage.tsx
index 5e845d5..985ed28 100644
--- a/packages/web/src/pages/ManageProjectsPage.tsx
+++ b/packages/web/src/pages/ManageProjectsPage.tsx
@@ -28,7 +28,7 @@ import {
 import { useListQuery } from '../hooks/useListQuery';
 import { Permissions, hasPermission } from '../hooks/useStaffAuth';
 import { ApiError, assertOk, authFetch } from '../lib/api';
-import { downloadBlob } from '../lib/download';
+import { downloadBlob, filenameFromResponse } from '../lib/download';
 import { formatDateTime, slugForFilename } from '../lib/format';
 import { useTranslation } from '../lib/i18n';
 import { deriveFallbackKey } from '../lib/qr';
@@ -168,6 +168,10 @@ function ManageProjectsContent() {
 	const list = useListQuery<Project>(buildUrl, PAGE_SIZE);
 
 	const [pending, setPending] = useState<PendingAction>(null);
+	// Selection for the combined CSV export. Kept as ids rather than projects so a
+	// list refresh cannot leave stale copies of renamed rows in here.
+	const [selectedIds, setSelectedIds] = useState<string[]>([]);
+	const [isBulkDownloading, setIsBulkDownloading] = useState(false);
 	const [editing, setEditing] = useState<Project | null>(null);
 	const [editName, setEditName] = useState('');
 	const [editUrl, setEditUrl] = useState('');
@@ -302,6 +306,55 @@ function ManageProjectsContent() {
 		}
 	};
 
+	const toggleSelected = (projectId: string) => {
+		setSelectedIds((current) =>
+			current.includes(projectId)
+				? current.filter((id) => id !== projectId)
+				: [...current, projectId],
+		);
+	};
+
+	// Only the rows currently on screen. "Select all" that silently reached other
+	// pages would let one click request a CSV far larger than what the user can see.
+	const pageIds = list.items.map((project) => project.projectId);
+	const allOnPageSelected =
+		pageIds.length > 0 && pageIds.every((id) => selectedIds.includes(id));
+
+	const toggleSelectAllOnPage = () => {
+		setSelectedIds((current) =>
+			allOnPageSelected
+				? current.filter((id) => !pageIds.includes(id))
+				: [...new Set([...current, ...pageIds])],
+		);
+	};
+
+	const handleDownloadSelectedCsv = async () => {
+		if (selectedIds.length === 0) return;
+		setIsBulkDownloading(true);
+		try {
+			const res = await authFetch(
+				`${TRACKING_LINK_API_URL}/projects/access-logs/csv?projectIds=${selectedIds
+					.map(encodeURIComponent)
+					.join(',')}`,
+			);
+			await assertOk(res);
+			const blob = await res.blob();
+			// The server names the file (it knows the project names and the row range);
+			// this only supplies the fallback for the rare case where the header is
+			// missing, since downloadBlob needs some name.
+			downloadBlob(
+				blob,
+				filenameFromResponse(res) ??
+					`${slugForFilename('access-logs', String(selectedIds.length))}.csv`,
+			);
+			setSelectedIds([]);
+		} catch (err) {
+			toast.error(describeError(err));
+		} finally {
+			setIsBulkDownloading(false);
+		}
+	};
+
 	const handleConfirmDelete = async () => {
 		if (!confirmTarget) return;
 		const target = confirmTarget;
@@ -386,65 +439,120 @@ function ManageProjectsContent() {
 						)}
 					</div>
 				) : (
-					<ul className="divide-y divide-border">
-						{list.items.map((project) => (
-							<li
-								key={project.projectId}
-								className="p-4 transition-colors hover:bg-muted/30"
-							>
-								<div className="mb-2 flex items-start justify-between gap-3">
-									<p className="min-w-0 break-words text-sm font-medium leading-snug">
-										{project.name}
-									</p>
-									<span className="flex shrink-0 items-center gap-3 text-xs tabular-nums text-muted-foreground">
-										{/* Labelled text, not a `title` attribute: title is
+					<>
+						{canAnalytics ? (
+							<div className="flex flex-wrap items-center justify-between gap-3 border-b bg-muted/20 px-4 py-2">
+								<label className="flex cursor-pointer items-center gap-2 text-xs">
+									<input
+										type="checkbox"
+										checked={allOnPageSelected}
+										onChange={toggleSelectAllOnPage}
+										className="h-4 w-4 cursor-pointer accent-primary"
+									/>
+									{t('projects.selectAllOnPage')}
+								</label>
+								<div className="flex items-center gap-3">
+									{/* aria-live so the count is announced as boxes are ticked —
+								    otherwise there is no feedback that the button's target
+								    changed. */}
+									<span
+										aria-live="polite"
+										className="text-xs tabular-nums text-muted-foreground"
+									>
+										{t('projects.selectedCount', {
+											count: String(selectedIds.length),
+										})}
+									</span>
+									<button
+										type="button"
+										onClick={() => void handleDownloadSelectedCsv()}
+										disabled={selectedIds.length === 0 || isBulkDownloading}
+										className={btnSecondary}
+									>
+										{isBulkDownloading ? (
+											<Loader2
+												className="h-4 w-4 animate-spin"
+												aria-hidden="true"
+											/>
+										) : (
+											<Download className="h-4 w-4" aria-hidden="true" />
+										)}
+										{t('projects.downloadSelectedCsv')}
+									</button>
+								</div>
+							</div>
+						) : null}
+						<ul className="divide-y divide-border">
+							{list.items.map((project) => (
+								<li
+									key={project.projectId}
+									className="p-4 transition-colors hover:bg-muted/30"
+								>
+									<div className="mb-2 flex items-start justify-between gap-3">
+										{canAnalytics ? (
+											<input
+												type="checkbox"
+												checked={selectedIds.includes(project.projectId)}
+												onChange={() => toggleSelected(project.projectId)}
+												aria-label={t('projects.selectFor', {
+													name: project.name,
+												})}
+												className="mt-0.5 h-4 w-4 shrink-0 cursor-pointer accent-primary"
+											/>
+										) : null}
+										<p className="min-w-0 flex-1 break-words text-sm font-medium leading-snug">
+											{project.name}
+										</p>
+										<span className="flex shrink-0 items-center gap-3 text-xs tabular-nums text-muted-foreground">
+											{/* Labelled text, not a `title` attribute: title is
 										    unavailable on touch and inconsistently exposed to
 										    assistive tech, so these numbers were unlabelled on the
 										    device this app is used on. */}
-										<span className="flex items-center gap-1">
-											<QrCode className="h-3.5 w-3.5" aria-hidden="true" />
-											<span className="sr-only">
-												{t('common.qrCodeCount')}:{' '}
+											<span className="flex items-center gap-1">
+												<QrCode className="h-3.5 w-3.5" aria-hidden="true" />
+												<span className="sr-only">
+													{t('common.qrCodeCount')}:{' '}
+												</span>
+												{project.qrCodeCount.toLocaleString()}
+											</span>
+											<span className="flex items-center gap-1">
+												<ScanLine className="h-3.5 w-3.5" aria-hidden="true" />
+												<span className="sr-only">{t('common.scans')}: </span>
+												{project.accessCount.toLocaleString()}
 											</span>
-											{project.qrCodeCount.toLocaleString()}
-										</span>
-										<span className="flex items-center gap-1">
-											<ScanLine className="h-3.5 w-3.5" aria-hidden="true" />
-											<span className="sr-only">{t('common.scans')}: </span>
-											{project.accessCount.toLocaleString()}
 										</span>
-									</span>
-								</div>
+									</div>
 
-								<a
-									href={project.destinationUrl}
-									target="_blank"
-									rel="noopener noreferrer"
-									className="mb-3 flex min-w-0 items-center gap-1 text-xs text-primary hover:underline"
-								>
-									<span className="truncate">{project.destinationUrl}</span>
-									<ExternalLink className="h-3 w-3 shrink-0" />
-								</a>
+									<a
+										href={project.destinationUrl}
+										target="_blank"
+										rel="noopener noreferrer"
+										className="mb-3 flex min-w-0 items-center gap-1 text-xs text-primary hover:underline"
+									>
+										<span className="truncate">{project.destinationUrl}</span>
+										<ExternalLink className="h-3 w-3 shrink-0" />
+									</a>
 
-								<div className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
-									<span className="text-xs text-muted-foreground">
-										{t('common.created')}:{' '}
-										{formatDateTime(project.createdAt, locale)}
-									</span>
-									<ProjectRowActions
-										project={project}
-										canEdit={canEdit}
-										canAnalytics={canAnalytics}
-										canDelete={canDelete}
-										pending={pending}
-										onEdit={() => openEdit(project)}
-										onDownloadCsv={() => void handleDownloadCsv(project)}
-										onDelete={() => setConfirmTarget(project)}
-									/>
-								</div>
-							</li>
-						))}
-					</ul>
+									<div className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
+										<span className="text-xs text-muted-foreground">
+											{t('common.created')}:{' '}
+											{formatDateTime(project.createdAt, locale)}
+										</span>
+										<ProjectRowActions
+											project={project}
+											canEdit={canEdit}
+											canAnalytics={canAnalytics}
+											canDelete={canDelete}
+											pending={pending}
+											onEdit={() => openEdit(project)}
+											onDownloadCsv={() => void handleDownloadCsv(project)}
+											onDelete={() => setConfirmTarget(project)}
+										/>
+									</div>
+								</li>
+							))}
+						</ul>
+					</>
 				)}
 
 				{!list.error && !showEmpty ? (
diff --git a/packages/web/src/pages/QRCodesPage.tsx b/packages/web/src/pages/QRCodesPage.tsx
index 7faac53..958f24d 100644
--- a/packages/web/src/pages/QRCodesPage.tsx
+++ b/packages/web/src/pages/QRCodesPage.tsx
@@ -28,14 +28,19 @@ import { useListQuery } from '../hooks/useListQuery';
 import { Permissions, hasPermission } from '../hooks/useStaffAuth';
 import { ApiError, assertOk, authFetch } from '../lib/api';
 import { downloadBlob } from '../lib/download';
-import { formatDateTime, slugForFilename } from '../lib/format';
+import { formatDateTime } from '../lib/format';
 import { useTranslation } from '../lib/i18n';
 import {
+	QR_CAPTION_DEFAULTS,
+	type QrCaptionOptions,
 	deriveFallbackKey,
+	qrCaptionLines,
 	qrPngBlob,
+	qrPngFileName,
 	qrPreviewDataUrl,
 	qrTargetUrl,
 } from '../lib/qr';
+import { safeStorage } from '../lib/storage';
 import {
 	btnPrimary,
 	btnRow,
@@ -55,6 +60,8 @@ interface QRCodeRecord {
 	location: string;
 	createdAt: string;
 	creatorId?: string | null;
+	/** Scans recorded for this code. Absent on responses from an older API. */
+	scanCount?: number;
 }
 
 interface Project {
@@ -123,6 +130,53 @@ function QRThumbnail({
 	);
 }
 
+const CAPTION_OPTIONS_KEY = 'tracking-link.qrCaption';
+
+/**
+ * Remembers the caption checkboxes across dialogs.
+ *
+ * QR codes are downloaded one at a time but printed as a batch, so the choice is
+ * made once for a run of twenty and re-ticking two boxes per code would be the
+ * bulk of the work. Persisting only carries a deliberate choice forward — the
+ * first-run state is still QR_CAPTION_DEFAULTS, i.e. no caption.
+ *
+ * safeStorage rather than localStorage: this reads inside a useState initialiser,
+ * and iOS Safari in private browsing throws on the getter itself.
+ */
+function useCaptionOptions(): [
+	QrCaptionOptions,
+	(next: QrCaptionOptions) => void,
+] {
+	const [options, setOptions] = useState<QrCaptionOptions>(() => {
+		const raw = safeStorage.get(CAPTION_OPTIONS_KEY);
+		if (!raw) return QR_CAPTION_DEFAULTS;
+		try {
+			const parsed = JSON.parse(raw) as Partial<QrCaptionOptions>;
+			// Read field by field: anything absent or not a boolean falls back to the
+			// default, so a hand-edited or stale value cannot switch captions on.
+			return {
+				includeName:
+					typeof parsed.includeName === 'boolean'
+						? parsed.includeName
+						: QR_CAPTION_DEFAULTS.includeName,
+				includeMedium:
+					typeof parsed.includeMedium === 'boolean'
+						? parsed.includeMedium
+						: QR_CAPTION_DEFAULTS.includeMedium,
+			};
+		} catch {
+			return QR_CAPTION_DEFAULTS;
+		}
+	});
+
+	const update = useCallback((next: QrCaptionOptions) => {
+		setOptions(next);
+		safeStorage.set(CAPTION_OPTIONS_KEY, JSON.stringify(next));
+	}, []);
+
+	return [options, update];
+}
+
 function QRDialog({
 	qr,
 	fallbackKey,
@@ -140,25 +194,23 @@ function QRDialog({
 	);
 	const { dataUrl, failed } = useQRDataUrl(url);
 	const [isDownloading, setIsDownloading] = useState(false);
+	const [caption, setCaption] = useCaptionOptions();
 
-	const captionLines = [
-		qr.name,
-		[qr.medium, qr.location].filter(Boolean).join(' · '),
-	].filter(Boolean);
+	const captionLines = useMemo(
+		() => qrCaptionLines(qr, caption),
+		[qr, caption],
+	);
 
 	const handleDownload = async () => {
 		setIsDownloading(true);
 		try {
-			// A PNG with the name / medium / location printed underneath, saved via a
-			// blob. Previously this was `<a href={dataUrl} download="qr-<uuid>.png">`:
-			// the file was unidentifiable in a downloads folder, the printed sheet had
-			// no label at all, and on iOS Safari a data: URL tends to navigate in-tab
-			// rather than save — destroying this dialog in the process.
+			// Saved via a blob. Previously this was
+			// `<a href={dataUrl} download="qr-<uuid>.png">`: the file was
+			// unidentifiable in a downloads folder, and on iOS Safari a data: URL
+			// tends to navigate in-tab rather than save — destroying this dialog in
+			// the process.
 			const blob = await qrPngBlob(url, captionLines);
-			downloadBlob(
-				blob,
-				`${slugForFilename(qr.name, qr.medium, qr.location)}.png`,
-			);
+			downloadBlob(blob, qrPngFileName(qr.name));
 		} catch (error) {
 			toast.error(
 				error instanceof Error
@@ -225,6 +277,35 @@ function QRDialog({
 					)}
 				</div>
 
+				<fieldset className="w-full rounded border p-3">
+					<legend className="px-1 text-xs font-medium text-muted-foreground">
+						{t('qrCodes.captionLegend')}
+					</legend>
+					<div className="flex flex-col gap-2">
+						<CaptionToggle
+							checked={caption.includeName}
+							onChange={(includeName) =>
+								setCaption({ ...caption, includeName })
+							}
+							label={t('qrCodes.nameLabel')}
+							sample={qr.name}
+						/>
+						<CaptionToggle
+							checked={caption.includeMedium}
+							onChange={(includeMedium) =>
+								setCaption({ ...caption, includeMedium })
+							}
+							label={t('qrCodes.mediumLabel')}
+							sample={[qr.medium, qr.location].filter(Boolean).join(' · ')}
+						/>
+					</div>
+					<p className="mt-2 text-xs text-muted-foreground">
+						{captionLines.length
+							? t('qrCodes.captionHint')
+							: t('qrCodes.captionHintNone')}
+					</p>
+				</fieldset>
+
 				<div className="w-full">
 					<p className="mb-1 text-xs font-medium text-muted-foreground">
 						{t('qrCodes.scanUrlLabel')}
@@ -238,6 +319,44 @@ function QRDialog({
 	);
 }
 
+/**
+ * A caption checkbox that shows the text it would actually print.
+ *
+ * Without the sample the choice is abstract — "Medium" does not tell you that
+ * ticking it also prints the location alongside it. Showing the exact string
+ * means the bundling needs no explaining.
+ */
+function CaptionToggle({
+	checked,
+	onChange,
+	label,
+	sample,
+}: {
+	checked: boolean;
+	onChange: (next: boolean) => void;
+	label: string;
+	sample: string;
+}) {
+	return (
+		<label className="flex cursor-pointer items-start gap-2 text-sm">
+			<input
+				type="checkbox"
+				checked={checked}
+				onChange={(event) => onChange(event.target.checked)}
+				className="mt-0.5 h-4 w-4 shrink-0 cursor-pointer accent-primary"
+			/>
+			<span className="min-w-0">
+				<span className="font-medium">{label}</span>
+				{sample ? (
+					<span className="ml-1 break-words text-muted-foreground">
+						({sample})
+					</span>
+				) : null}
+			</span>
+		</label>
+	);
+}
+
 function QRCodesContent() {
 	const { user } = useAuthContext();
 	const { t, locale } = useTranslation();
@@ -510,9 +629,24 @@ function QRCodesContent() {
 										fallbackKey={effectiveFallbackKey}
 									/>
 									<div className="min-w-0 flex-1">
-										<p className="break-words text-sm font-medium leading-snug">
-											{qr.name}
-										</p>
+										<div className="flex items-start justify-between gap-2">
+											<p className="break-words text-sm font-medium leading-snug">
+												{qr.name}
+											</p>
+											{/* The count is the reason to open this screen during an
+											    event, so it sits on the same line as the name rather
+											    than in the metadata row below. */}
+											{qr.scanCount !== undefined ? (
+												<span
+													className="shrink-0 whitespace-nowrap rounded-full bg-muted px-2 py-0.5 text-xs font-medium tabular-nums"
+													title={t('qrCodes.scanCountTitle')}
+												>
+													{t('qrCodes.scanCount', {
+														count: qr.scanCount.toLocaleString(locale),
+													})}
+												</span>
+											) : null}
+										</div>
 										<dl className="mt-1 flex flex-wrap gap-x-4 gap-y-0.5 text-xs text-muted-foreground">
 											<div className="flex gap-1">
 												<dt>{t('common.medium')}:</dt>