1. The Short Version
- Every short link and its analytics are deleted automatically, at most 7 days after creation.
- We never store the IP addresses of people who open your links.
- Destinations are encrypted at rest with AES-256-GCM.
- We don't sell data, show ads or use third-party tracking scripts.
- There are no accounts. You can export or delete your workspace at any time from Settings.
2. Links You Create
When you shorten a link we store the destination address (encrypted), its domain name, the page title we read from it, the safety verdict, any rules you set, and timestamps. Link passwords are stored only as Argon2id hashes. Claim codes are stored only as keyed hashes.
You choose a lifetime between 1 hour and 7 days. When it ends, the link stops working immediately and the record is removed during the next cleanup, with secure delete enabled so the data is overwritten on disk.
3. People Who Open Links
When someone opens a short link we record aggregate counts: the day, the hour (UTC), device type, operating system, browser and the referring website's domain. We don't set cookies on visitors.
To estimate unique visitors we combine the visitor's IP address and browser identifier with a secret that is unique to that link, hash the result, and feed it into a HyperLogLog sketch. The IP address and the hash are never written to storage, and because the secret differs per link, visitors can't be recognised across links. The IP address is also used in memory for rate limiting.
4. Your Workspace
There are no accounts, emails or passwords. The first time you use the dashboard, your browser creates a random workspace key and keeps it in local storage. The server stores only a keyed hash of that key, along with your link defaults.
To show you which devices use your workspace, we keep a description of each browser and device and a shortened network address (for example 203.0.113.x) for the 20 most recent devices. A workspace with no links is deleted 30 days after it was last used.
5. Safety Checks and AI Providers
When the Guardian scan is on, our server requests the destination page to read its title and description. We then send the destination address, page title, description and our rule-based findings to Jev by TypeSafe AI for a risk decision and category. We don't send your workspace key or any visitor data to this provider.
You can turn the scan off for any link; rule-based checks still run on our server.
6. Cookies and Browser Storage
We don't use cookies. Your browser's local storage keeps your workspace key, theme choice, sidebar setting and a short list of your recent links for the home page. Clearing your browser data removes them from that device; your links keep working until they expire.
7. Service Providers
- Railway hosts the API and its database volume.
- Vercel hosts the website and forwards requests to the API.
- TypeSafe AI processes destination details for safety checks when enabled.
8. Your Choices and Rights
From Settings you can download a JSON export of your data, remove devices from the list, rotate your workspace key to cut off other devices, and permanently delete your workspace, which also deletes every link in it. Depending on where you live you may have additional rights, such as objecting to processing; contact us to exercise them.
9. Security
We use encryption at rest for destinations, Argon2id hashing for link passwords, hashed workspace keys, origin checks on changes, rate limiting and SSRF protection when fetching pages. No system is perfectly secure, and we can't guarantee absolute security.
10. Changes and Contact
We'll update the date at the top when this policy changes. Questions? Email hello@example.com.