The columns do real work
type, title, link, qrPassword, folder, subFolder, and the five utm_* fields — matched by header name, order-independent. A passcode in the sheet ships hashed; tags in the sheet attribute every future scan. The sample file demonstrates every column, so nothing is discoverable only by reading docs.