Privacy policy
Visitor click data
For each recorded click, we store these fields:
linkIdhourcountryreferrerHostdevicebrowserbot
These describe the link ID, hour bucket, country code, referrer host only, device class, browser family and bot flag. Bots and link-preview crawlers are excluded from human click counts.
We never store a visitor IP address, full user agent, full referrer URL, cookies or fingerprints in click records. Country comes only from Cloudflare's CF-IPCountry header when the trusted proxy is enabled (TRUSTED_PROXY=1). Missing or invalid country codes, including XX and T1, are stored as unknown.
Retention
Raw click records are deleted after 30 days. Daily analytics totals are kept for 30 days on Free and 365 days on Pro.
Rate limits and cookies
For rate limiting, client IP addresses are used only inside hashed counters that expire at the end of each rate-limit window. They are not stored in click analytics. The redirect sets no cookie. The signed-in app uses a session cookie.
Account data and email
We store your email address, hashed password, plan and Stripe customer ID. We use email only for verification and account notices. Stripe sends payment receipts.
Service providers
Cloudflare processes traffic and provides Email Sending SMTP for verification and account notices from [email protected] and operational alerts from [email protected]. Stripe processes subscriptions and payments.
When WEB_RISK_API_KEY is configured, Google Web Risk receives the destination URL of new and edited links for reputation checks, and URLs selected for later rechecks. Without that key, checks use the local blocklist without sending URLs to Web Risk.
Contact
For privacy questions or account data requests, email [email protected]. See our terms of service for usage and cancellation terms.