This privacy policy explains what information we collect when you use our URL shortener service, how we use it, and what rights you have regarding your data. We are committed to protecting your privacy while providing useful analytics features.
2. Information We Collect
When you create a shortened URL, we collect and store:
The original URL and the generated shortened URL
Your selected expiration date and usage limit
Password hash (if you enable password protection)
A unique access key for managing your shortened URL
Timestamp of URL creation
When someone clicks on a shortened URL, we automatically collect and store the following analytics data:
Timestamp: Exact date and time of the click
Referrer: The URL of the website that linked to your shortened URL (if available)
Country: Country-level location derived from the visitor's IP address
Browser: Type and version of the web browser used
Device Type: Whether the click came from Desktop, Mobile, or Tablet
Important: We do NOT store IP addresses in our analytics database. Geographic data is derived from the IP address at the time of the request but the IP address itself is never stored with analytics data.
3. Rate Limiting & Abuse Prevention
To protect our service from abuse and ensure availability for all users, we implement rate limiting measures that may temporarily store certain data:
What we temporarily store:
IP addresses: Used to enforce rate limits and prevent spam or automated abuse
Request fingerprints: A hashed combination of your IP address, browser information, and referrer to identify unique visitors
Request timestamps: To track request frequency
Why we collect this data:
Prevent automated scraping and bot abuse
Ensure fair usage of public resources
Protect service availability and performance
Detect and block malicious activity
How long we keep this data:
IP addresses and request data are stored for a maximum of 24 hours
All rate limiting data is automatically deleted after expiration
This data is never used for tracking, profiling, or marketing purposes
Legal basis: This processing is based on our legitimate interest in preventing abuse and ensuring service availability (GDPR Article 6(1)(f)).
4. URL Reports
When you report a malicious or abusive URL through our reporting system:
We store the reported URL, reason for the report, and any additional details you provide
Your IP address is stored to prevent abuse of the reporting system
Report data may be stored indefinitely for review and moderation purposes
This information is only accessible to service administrators
Purpose: Storing IP addresses with reports helps us identify false reports, prevent spam, and maintain the integrity of our reporting system.
5. How Geographic Data is Determined
Country-level location is determined using geolocation services that process the IP address in real-time to identify the country of origin. The IP address is used only for this purpose and is immediately discarded - it is never logged or stored in our analytics systems.
6. Analytics Dashboard Access
Analytics data is only accessible to users who possess the unique access key generated when the shortened URL was created. Without this key, analytics data cannot be viewed or exported.
The analytics dashboard provides:
Real-time and historical click data
Interactive charts showing clicks over time (by day, hour, and minute)
Breakdown of clicks by referrer source
Geographic distribution by country
Browser and device type statistics
Identification of peak usage hours
CSV export of all collected data
7. CSV Export
You can export all analytics data for your shortened URL as a CSV file. The exported data includes:
Complete timestamp for each click
Referrer URL (if available)
Country of origin
Browser information
Device type
You are responsible for securing and managing any exported CSV files. We recommend treating this data with appropriate care as it may contain patterns that could be used to identify usage patterns.
8. How We Use This Information
We use the collected information for the following purposes:
To operate and maintain the URL shortening service
To provide analytics and statistics to URL creators
To enforce security measures and access restrictions
To detect and prevent abuse, spam, and malicious activity
To improve service performance and user experience
We do NOT:
Sell or share your data with third parties for marketing
Use analytics data for advertising purposes
Track individual users across different shortened URLs
Build user profiles based on click behavior
9. Data Retention & Automatic Deletion
Shortened URLs: Automatically deleted when they reach their expiration date or usage limit
Analytics data: May no longer be accessible after URL expiration and may be deleted from our systems at any time
Rate limiting data: Automatically deleted after 24 hours maximum
URL reports: Stored indefinitely for moderation purposes
When you manually delete a shortened URL, associated analytics data may also be removed
We do not guarantee retention of analytics data after URL expiration or deletion
10. Your Rights & Control Over Your Data
You have the following rights regarding your data:
Access: View all analytics data via the dashboard using your access key (while the URL is active)
Export: Download all analytics data as a CSV file at any time (while the URL is active)
Deletion: Permanently delete your shortened URL and all associated analytics data using your access key
Control: Choose expiration dates and usage limits when creating URLs
Data deletion request: Contact us to request deletion of your IP address from reports or rate limiting systems
Important: If you lose your access key, you will not be able to access analytics or delete your shortened URL. Access keys cannot be recovered. Analytics data may not be accessible after URL expiration or deletion and may be permanently removed from our systems at any time.
11. Cookies & Browser Storage
Our service uses browser local storage to:
Remember shortened URLs you've created in your current browser
Store access keys for easy access to your URLs
Save your timezone preference for analytics display
This data is stored locally in your browser and is not transmitted to our servers unless you explicitly request to view analytics or delete a URL. We do not use cookies for tracking purposes.
12. Third-Party Services
We use third-party infrastructure services to host and operate our URL shortener. These services may process your data as part of providing their infrastructure services. We work only with reputable service providers that maintain strong security and privacy standards.
13. Data Sharing & Third Parties
We do not sell, trade, or share your data with third parties except:
As required by law or legal process
To protect our rights, property, or safety
With our infrastructure providers as necessary to operate the service
14. Security Measures
We implement reasonable security measures to protect your data:
Passwords are hashed using SHA-256 and never stored in plain text
Access keys are randomly generated and required for all management operations
Failed password attempts are rate-limited to prevent brute-force attacks
All data is transmitted over HTTPS
Automated abuse detection and prevention systems
Regular security reviews and updates
However, no online service is completely secure. We cannot guarantee absolute protection against unauthorized access, and you use the service at your own risk.
15. Children's Privacy
Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.
16. International Data Transfers
Your data may be processed on servers located in various countries. By using our service, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data regardless of where it is processed.
17. Changes to This Policy
We may update this Privacy Policy from time to time. We encourage you to review this policy periodically. Your continued use of the service after changes indicates acceptance of the updated policy.
18. Contact & Questions
If you have questions about this Privacy Policy or how your data is handled, you can contact us through the email below.