Security You Can Trust
Your links and their analytics belong to you. Click-level analytics are retained for 90 days; that retention window does not expire your links. We never sell your data.
Encrypted Connections
All data transmitted between your browser and our servers is encrypted using TLS 1.3, the latest encryption standard.
Secure Data Storage
Your data is stored in encrypted databases with regular backups. We use industry-standard encryption at rest.
Strong Password Policy
Passwords are hashed, checked against known breach lists at sign-up, and never stored or logged in plain text.
No Data Selling
We never sell your data to third parties. Your analytics and personal information stay private, always.
DDoS Protection
Advanced DDoS mitigation keeps your short links resolving even during traffic spikes or malicious attacks.
Patched, Not Certified
We keep our dependencies patched and review our own code before it ships. We have not commissioned a third-party penetration test, and we will say so here when we have rather than imply it now.
Privacy & Security Practices
We take compliance seriously and adhere to global privacy regulations
GDPR Compliant
We fully comply with the European General Data Protection Regulation. You have complete control over your data, including the right to access, correct, and delete it.
CCPA Ready
California residents have additional privacy rights under CCPA. We honor all requests and provide transparency about data collection practices.
Our Privacy Practices
Clear, simple policies that put you in control
Minimal Data Collection
We only collect data that's necessary to provide our service. No invasive tracking, no hidden data collection.
Transparent Analytics
Your visitors' privacy matters. We record what a click was - the time, the country, region and city its IP address points to, the referrer and the device - not who made it. The IP address itself is never stored. We do not build profiles of the people who click your links.
Data Portability
Export every visit to your links as a CSV at any time, and read your links and their analytics through the API. It is your data.
Right to Deletion
Delete your account and all associated data at any time. We permanently remove your data from our systems.
No Trackers on Your Links
A short link redirect carries no third-party scripts at all. Our own marketing pages do load Google Analytics, PostHog, Tawk.to chat and advertising pixels, but only after you accept the matching cookie categories - see our Cookie Policy for the full list.
Questions About Security?
Our team is here to help. Reach out with any security or privacy concerns.