Legal
Privacy Policy
Last updated: August 29, 2026
1. What we collect
For account holders: name, email address, hashed password, payout details you provide, and usage of the dashboard and API. For visitors clicking short links: technical signals such as a hashed IP address, country, device and browser type, referrer, and fraud/bot detection signals. We do not store raw visitor IP addresses — they are one-way hashed before storage.
2. How we use it
We use this data to operate redirects, show you analytics, calculate earnings, prevent fraud and abuse, secure the platform, process withdrawals, and communicate service updates. We do not sell personal data.
3. Cookies
We use strictly necessary cookies for authentication and CSRF protection on the dashboard. Redirect pages may use short-lived cookies to enforce timers and CAPTCHA steps. We do not use third-party advertising cookies on the dashboard.
4. Sharing
Data is shared only with infrastructure providers needed to run the Service (hosting, email delivery, DNS/CDN) under data-processing agreements, or where required by law. Aggregated, non-identifying statistics may be shared publicly.
5. Retention
Account data is kept while your account is active. Click analytics are retained for reporting and fraud-audit purposes. If you delete your account, personal data is removed or anonymized within 30 days, except records we must keep for legal or accounting reasons.
6. Your rights
You can access and update your profile in settings, export your link data via the API, and delete your account at any time. You may also contact us to request a copy or deletion of your personal data.
7. Security
Passwords are hashed, API tokens are stored as SHA-256 digests, and visitor IPs are hashed. Access to production data is restricted and logged.
8. Changes
We will post any changes to this policy on this page and update the date above. Material changes will be highlighted on the dashboard.
9. Contact
Privacy questions or requests? Contact us.