Privacy

What we store, why, and for how long. This applies both to people who create links and to people who click them.

When someone clicks a short link

The visitor gets a redirect. No cookies are set, no scripts run, and no page is shown in between. For each click we store:

• The time.
• The value of ?ref=, if the link had one.
• The country, region and city looked up from the IP address.
• The domain of the page the visitor came from, if their browser sent it. Not the full address.
• The browser, operating system and device type, read from the user agent.
• A hash of the IP address mixed with a secret that changes every day. It lets us count unique visitors within a day and cannot be turned back into the address.

The IP address itself is never written to disk. It is sent once to our own location service to find the country and city, then discarded. Click records are kept for 365 days, or until the link is deleted, whichever comes first. The link's total click count is kept for as long as the link exists.

When you create a link

We store the destination, the short code, an optional note, and a hash of the manage page key. We cannot read your key back. We also store a daily-salted hash of your IP address to limit how many links one network can create.

If you add an email, we store it to send the confirmation code and recovery codes. We send no other email and never share the address. You can remove it from the manage page at any time.

Your browser gets one cookie from us, lnk_csrf, which protects forms from being submitted by other sites. It holds a random value and nothing about you.

Payments

Card details go directly to Stripe and never reach our server. Stripe tells us the payment succeeded, the amount, and a payment reference, which we keep with the link for accounting. Stripe's own privacy policy covers what they store.

Reports

A report stores the reason, your description, your email if you give one, and a daily-salted hash of your IP address so one person cannot flag a link alone.

Deletion

Deleting a link on its manage page removes it and all its click records immediately. Links that run out and are not renewed are deleted 60 days later. Database backups roll over within 14 days.

Who can see your stats

Only people with the manage page address, and the site operator. If you turn on the public stats page, anyone can see the totals and breakdowns, but not the list of individual clicks.