Privacy Policy

1. Information We Collect

When you create a short link, we store its destination, short code, creation and status information, optional alias and campaign parameters, and its relationship to an account or guest browser. When a short link is opened, we may process the time of the visit, referrer, user agent, IP address or a derived network identifier, and related request information needed to operate, secure, and summarize link activity.

If you register with email, we collect your name, email address, and a one-way password hash; we do not store your plain-text password. If you use Google sign-in, Google provides basic identity information such as your name, email address, and provider account identifier. Guest history is associated with the current browser using cookies or local storage. Contact and abuse reports contain the information you submit.

When you create or edit a hosted page, we process its page type, template, public slug, publication status, profile fields, theme and SEO settings, and the content of its blocks. Blocks can include text, links, contact or location details, social profiles, event information, product or pricing descriptions, testimonials, external media URLs, and other information you choose to provide. If you upload an image or video, we process the file, detected file type, size, dimensions where applicable, generated asset address, and account relationship needed to store and deliver it.

2. Public Pages and Aggregate Views

Content on a page you publish is available to anyone who visits its public UrlShorter address. Search engines are currently instructed not to index user-created pages, but a noindex instruction is not access control and cannot make shared content private. Links, embeds, and media hosted by third parties can send a visitor to, or request content from, those providers under their own privacy practices.

On supported published-page routes, UrlShorter increments a page-level aggregate view counter. A page_viewed_<id> cookie prevents the same browser from increasing that counter again for 30 minutes. The page record stores the resulting total, not an identity-level visitor profile. Ordinary infrastructure logs and security controls may still process request information needed to serve and protect the page.

3. How We Use Information

We use this information to create and serve redirects, authenticate users, maintain dashboards, provide click totals and available referrer and device summaries, build and deliver hosted pages, process media, count aggregate supported-page views, investigate abuse, prevent fraud, respond to recorded requests, and improve the reliability of the Service. We do not treat a short link or public page address as access control: anyone who has it may open it.

4. Cookies and Local Storage

Essential browser storage supports signed-in sessions, Google sign-in state, security, guest-link history, guest-page ownership, aggregate page-view de-duplication, dashboard cache and layout preferences. The signed, HttpOnly guest_pages cookie contains a limited set of guest page identifiers and expires after 30 days. Clearing it can remove the ability to edit those pages. The exact names, durations, and purposes are listed in the Cookie Policy.

If optional analytics or advertising is enabled, Google and other third-party providers may use their own cookies, web beacons (also called pixels), IP addresses or other network identifiers, and similar technologies for delivery, security, measurement, and advertising under their own policies.

5. Retention

Registered-account links and pages remain associated with the account until they are deleted, disabled, or removed under our Terms. A guest hosted-page record is configured to expire 30 days after creation. The browser claims used to manage guest links and guest pages expire after 30 days, although a link record can have a different lifetime; the creation result should be treated as authoritative for any displayed link expiration. Clearing local history does not by itself delete a server record.

Contact and abuse reports are retained while they are needed to review, respond, enforce the Terms, prevent repeat abuse, resolve disputes, and meet legal obligations. The current application does not expose a fixed automatic deletion period for those records. Removing a media block or deleting a page does not necessarily erase a separately stored upload immediately. Deleted content may also remain temporarily in backups or abuse-evidence records before routine removal or isolation; use the contact form to request eligible asset removal.

6. Service Providers and Advertising

We use service providers for hosting, databases, file delivery, Google authentication, monitoring, bot protection, URL-reputation checks when configured, and other infrastructure. A provider receives the information needed for the feature it supplies under its contract and policies. Data may be processed in countries other than your own, subject to safeguards required by applicable law.

Google AdSense

UrlShorter's optional Google AdSense browser client is configured to wait until a visitor chooses “Accept all” in the site's cookie controls. That choice controls whether UrlShorter attempts to load the optional client; it does not remove storage already present in the browser or control data processing on a third-party site.

If the client loads, Google and other third-party advertising providers may place or read third-party cookies and use web beacons, pixels, or similar technologies. Provider requests can include an IP address or other network identifier, device and browser information, the page and referrer URLs, and advertising interaction or measurement data. Google describes this processing in How Google uses information from sites or apps that use its services.

Using a Google service or displaying a third-party advertisement does not mean that Google or the advertiser has reviewed, approved, or endorsed UrlShorter. The cookie control describes the site's technical behavior; it is not a claim that one selection satisfies every jurisdiction's requirements.

Users may manage personalized advertising in Google Ads Settings.

7. Your Choices and Rights

You can change cookie choices through the site's cookie controls, clear guest history through your browser, and manage or delete eligible links from your account. Depending on your location, you may also request access, correction, deletion, restriction, portability, or objection to certain processing by contacting us. We may need to verify your identity before completing a request.

8. Security and Children

We use technical and organizational safeguards appropriate to the Service, but no online system is fully secure. The Service is not directed to children under 13, and users must meet the minimum age of digital consent that applies in their jurisdiction.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on our website.

10. Contact Us

If you have questions about this privacy policy, please use the contact form.