Privacy Policy
Last Updated: November 13, 2025
1. Introduction
Welcome to our URL shortening service ("Service," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our Service.
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
Account Information: When you create an account, we collect:
- Email address (required)
- Password (encrypted)
- Full name (optional)
- Company name (optional)
- Profile picture (optional)
Payment Information: For premium subscriptions, we collect:
- Billing name and address
- Payment information is processed by third-party payment processors (Stripe, PayPal)
- We do NOT store your full credit card numbers
Communications: When you contact us, we collect:
- Your email address
- Your name
- Message content
- Any attachments you send
2.2 Information Collected Automatically
When You Use Our Service:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and features used
- Time and date of visits
- Referring website addresses
- Click patterns and navigation paths
Shortened Link Data: When you create a shortened link, we collect:
- Original URL
- Custom alias (if provided)
- Creation date and time
- Link creator's account ID
- Link settings (password protection, expiration, etc.)
Click Analytics: When someone clicks a shortened link, we collect:
- Click timestamp
- Referrer URL (where the click came from)
- Geographic location (country, region, city)
- Device information (type, OS, browser)
- IP address (anonymized after 90 days)
2.3 Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze how you use our Service
- Show relevant advertisements
See our Cookie Policy for detailed information.
3. How We Use Your Information
3.1 To Provide and Improve Our Service
- Create and manage your account
- Process your shortened links
- Provide link analytics and statistics
- Deliver customer support
- Send service-related notifications
- Improve and optimize our Service
- Develop new features
3.2 For Security and Fraud Prevention
- Verify your identity
- Detect and prevent fraud, spam, and abuse
- Monitor for malicious links
- Comply with legal obligations
- Protect our rights and property
3.3 For Marketing and Communication
With your consent, we may:
- Send promotional emails about new features
- Share news and updates about our Service
- Conduct surveys and research
- Show personalized advertisements
You can opt-out of marketing communications at any time.
3.4 For Analytics and Research
- Understand how users interact with our Service
- Analyze trends and usage patterns
- Create aggregated, anonymized statistics
- Improve user experience
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your personal data based on:
- Contract Performance: To provide our Service to you
- Legitimate Interests: To improve our Service, prevent fraud, and ensure security
- Consent: For marketing communications and non-essential cookies
- Legal Obligations: To comply with laws and regulations
5. How We Share Your Information
5.1 We DO NOT Sell Your Personal Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
5.2 Service Providers
We share information with trusted third-party service providers who help us operate our Service:
Infrastructure and Hosting:
- Cloud hosting providers (AWS, DigitalOcean, etc.)
- Content delivery networks (CDN)
- Database management services
Analytics:
- Google Analytics (website usage)
- Mixpanel or similar (product analytics)
Payment Processing:
- Stripe (credit card processing)
- PayPal (alternative payments)
Communication:
- Email service providers (transactional and marketing emails)
- Customer support platforms
Advertising:
- Google Ads
- Facebook Ads
- Other advertising networks
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
5.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
5.4 Legal Requirements
We may disclose your information if required by law or in response to:
- Court orders or subpoenas
- Law enforcement requests
- Legal proceedings
- Protection of our rights and safety
- Compliance with regulations
5.5 With Your Consent
We may share your information with third parties when you give us explicit consent to do so.
6. Data Retention
6.1 Account Data
We retain your account information for as long as your account is active or as needed to provide you services.
6.2 Link Data
- Shortened links and analytics: Retained indefinitely by default
- You can delete individual links or your entire account at any time
- Deleted links are permanently removed within 30 days
6.3 Analytics Data
- Detailed click data: Retained for 2 years
- IP addresses: Anonymized after 90 days
- Aggregated statistics: Retained indefinitely
6.4 After Account Deletion
When you delete your account:
- Personal information is deleted within 30 days
- Some data may be retained in backups for up to 90 days
- Aggregated, anonymized data may be retained indefinitely
7. Your Privacy Rights
7.1 General Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data
- Export: Receive your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
7.2 Additional Rights for EEA Users (GDPR)
If you are in the EEA, you also have the right to:
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Portability: Transfer your data to another service
- Withdraw Consent: Withdraw consent for processing
- Lodge a Complaint: File a complaint with your data protection authority
7.3 Additional Rights for California Users (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect
- Know if we sell or share personal information (we don't)
- Opt-out of the sale of personal information
- Non-discrimination for exercising your rights
7.4 How to Exercise Your Rights
To exercise any of these rights:
- Log into your account and use account settings
- Email us at [email protected]
- Use the data export/deletion tools in your dashboard
We will respond to your request within 30 days.
8. Data Security
8.1 Security Measures
We implement industry-standard security measures to protect your information:
- Encryption: Data encrypted in transit (TLS/SSL) and at rest
- Access Controls: Restricted access to personal data
- Authentication: Secure login with password hashing
- Monitoring: Regular security audits and monitoring
- Backups: Regular encrypted backups
8.2 Two-Factor Authentication
We strongly recommend enabling two-factor authentication (2FA) for additional account security.
8.3 No Absolute Security
Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.
8.4 Your Responsibility
You are responsible for:
- Keeping your password secure
- Not sharing your account credentials
- Notifying us of any security breach
- Using a secure internet connection
9. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us. We will delete such information from our systems.
10. International Data Transfers
10.1 Data Location
Your information may be transferred to and processed in countries other than your country of residence, including [Your Country/Region].
10.2 Safeguards
When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (for EEA transfers)
- Adequacy decisions
- Your explicit consent
11. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
12. California "Do Not Track" Disclosure
Our Service does not respond to Do Not Track (DNT) signals. However, you can control cookies through your browser settings and our cookie consent tool.
13. Changes to This Privacy Policy
13.1 Updates
We may update this Privacy Policy from time to time. Changes will be effective when posted with a new "Last Updated" date.
13.2 Notification
For material changes, we will:
- Send an email notification
- Display a prominent notice on our website
- Request your consent if required by law
13.3 Your Continued Use
Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
14. Data Protection Officer
For privacy-related inquiries, you can contact our Data Protection Officer at:
Email: [email protected]
15. Supervisory Authority
If you are in the EEA and have concerns about how we handle your data, you have the right to lodge a complaint with your local data protection authority.
16. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
General Inquiries:
Email: [email protected]
Privacy-Specific Inquiries:
Email: [email protected]
Data Subject Requests:
Email: [email protected]
17. Summary of Key Points
Information We Collect:
- Account details, payment info, usage data, link analytics
How We Use It:
- Provide service, improve features, prevent fraud, send updates
How We Share It:
- Service providers, legal requirements (we don't sell your data)
Your Rights:
- Access, correct, delete, export your data; opt-out of marketing
Data Security:
- Encryption, access controls, regular security audits
Retention:
- Account data: while active; Link data: 2 years; Aggregated data: indefinitely
Contact:
By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.