Privacy & data.

Your account and links

Your name, email, password hash and security settings are stored in our database. Links, destinations and reports are accessible to your signed-in account. Public short links redirect visitors without requiring them to sign in.

Click reporting

For an eligible click, we store the link, time, referring website’s hostname, approximate country when available, device category and campaign labels. We store a keyed browser identifier to estimate unique visitors. Click-event records do not store raw IP addresses, full referrer URLs or user-agent strings.

Cookies and estimates

A signed first-party click cookie lasts up to one year. Clearing cookies, changing browsers or using a different domain can produce a new estimated visitor. Known bots, preview requests and prefetches are filtered where possible. These reports do not establish a person’s identity.

Interest invitations

The platform owner may import an email list and share personalized interest invitations. Opening an invitation does not mark it as interested. An explicit thumbs-up records interest associated with that invitation in the owner’s private lead list. It does not independently verify mailbox ownership. Visitors can withdraw their interest on the interest page.

Service providers and retention

The app runs on Vercel and stores its database on Neon. Those services may process request data in their own infrastructure logs. Configured account-recovery emails are delivered through the platform’s Google Workspace sender. Deleting a link stops its redirect; historic click reports remain. No automated email campaign is sent when you register or click a short link.

Account security

Manage your password, authenticator and recovery email under Account security. Keep your recovery codes private. A recovery email is active only after inbox confirmation.