TRANSPARENT ABOUT DATA

Privacy

What we store

For accounts: name, email, a protected password hash and session data. For links: destination, short address, status, owner and change history.

Click data

We record a unique click identifier, the link, time in UTC, referring domain and any UTM tags provided. We also store the country, browser name, operating system and device type when identifiable. The country is determined from the IP address locally on the server; the IP address itself and the original User-Agent string are not stored in link analytics. We do not collect a city, precise coordinates, the full referring URL or a device fingerprint. Repeated opens count as separate clicks; bots may appear in statistics.

Cookies and abuse prevention

Necessary session cookies are used for login. Rate limits use a short-lived key based on an HMAC of the client's address when a trusted proxy is configured. These keys expire automatically at the end of the rate-limit window. There are no marketing cookies.

Who can access the data

Account owners see their own links and aggregate statistics. Authorized moderators can review links and reports to prevent abuse. Short links are public: do not use them to conceal a secret address.

Retention and requests

Deleting a link disables redirects and hides it from the dashboard. Change history, statistics and moderation records are retained.

Links and related statistics are stored while needed to operate the service. The operator must establish policies for deletion, backups and handling user requests before public launch. Automatic account deletion is not available in this version.

Website analytics

The website uses Google Analytics 4 and Yandex Metrica to measure visits and navigation between pages. Enabled services load automatically and may use cookies and identifiers to collect website usage statistics.

Cookies also store your language and theme preferences. Short-link click statistics described above are processed separately from website analytics.