Privacy Policy

Welcome to the Long To Short URL Privacy Policy. This document explains our practices regarding the collection, use, and disclosure of information that we receive when you use our website and services.

By using our platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with these terms, please refrain from using our platform.

We use the information we collect to operate, maintain, and improve the platform. This includes providing your analytics dashboard, managing your account and subscription, detecting and preventing abuse, and communicating with you about service updates or policy changes.

Click and scan data is presented to you through the analytics dashboard in aggregate and individual form — city-level geo-location, device and browser details, network and ISP data, UTM parameters, referral source, traffic source and medium, bot detection signals, and timestamps. This data is used to power your analytics; it is not sold or shared with third parties for their own purposes. The services we use to run the platform are listed in section 7.

We do not sell your personal data or the analytics data generated by your links and QR codes. Your data belongs to you and is used only to deliver the service you signed up for.

We retain your account information and analytics data for as long as your account is active. If you cancel your subscription, your data is retained in case you re-subscribe later. You can request permanent deletion of your account and associated data at any time by contacting support.

Click and scan data is kept for the lifetime of your account, except the visitor's IP address, which is deleted from each record after 30 days. You can delete a short link's click and scan data at any time by resetting its analytics, and changing a link's destination deletes it too. A short link you delete goes to the trash, where you can restore it for 30 days; after that it is deleted for good together with its click and scan data. A log of security-relevant account actions (for example sign-outs, deletions and administrator changes) is kept for one year. Aggregated and anonymised statistics may be retained indefinitely for internal reporting, but never in a form that identifies individual users or visitors.

We use essential cookies to manage your session and authentication. These are necessary for the platform to function — for example, keeping you logged in and maintaining your dashboard preferences.

We use Google Analytics to understand how people use our website and dashboard, which helps us improve the product. Google Analytics runs on our pages — including the page that forwards short-link visitors to their destination — sets its own cookies, and sends usage data such as pages viewed, device information and IP address to Google, which processes it under Google's privacy policy. You can block these cookies in your browser settings or with a browser add-on; the platform keeps working without them.

To keep pages fast, your browser also sends us page-speed measurements (how long the page took to load and respond, whether its layout shifted, and which part of the page was involved) together with the page address. From your browser's user agent we keep only the kind of device (phone, tablet or computer). The measurements contain no cookie, account or IP address, are not linked to you, and are kept with our server logs.

We do not use cookies for advertising purposes or share cookie data with advertisers or data brokers.

Short links and dynamic QR codes route traffic through our servers to enable click and scan tracking. When a visitor clicks your short link or scans your dynamic QR code, we log the following data for your analytics dashboard:

• Geo-location data at the city and country level (including region, ZIP, latitude/longitude, and timezone)
• Timestamp of the scan or click
• Device type, brand, and model
• Operating system and version
• Browser and version
• Screen width and height
• Language settings
• Referral source (the website or app the visitor came from)
• UTM parameters (source, medium, campaign, term, content)
• Network information (ISP, ASN number, ASN name, connection type)
• Traffic source and medium (from UTM parameters or the referring site, otherwise marked as direct)
• IP address
• Bot detection signals (bot name, confidence score, VPN/proxy/TOR/datacenter flags)
• IP reputation score and suspicious activity flags

This data is shown to you in your account dashboard. We do not use it for any purpose other than providing your analytics reports and keeping the service running and free of abuse.

We rely on these services to run the platform:

• Stripe processes subscription payments. Stripe receives your billing information under its own privacy policy; we never store full payment card numbers.
• ip-api.com receives the IP address of each click or scan and returns its approximate location, network provider and VPN/proxy flags for your analytics — unless the service is configured with a local geolocation database, in which case the lookup happens on our own server and no third party receives the address.
• Google provides Google Analytics (see section 5) and, if you choose it, sign-in with your Google account.
• Our email delivery provider receives your email address to send account emails and, if you opt in, newsletters.

We do not share your link data, QR code content, or analytics data with third parties for their own use. The platform does not integrate with external advertising networks or data brokers.

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. You can update your account information at any time from your account settings, download your data (account, links and every click and scan) from Settings → Account, and delete your account there. For anything else, contact our support team.

We will respond to your request within the time frames required by applicable law. We may need to verify your identity before processing certain requests to protect your account security.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If the changes are significant, we will notify you by email or through the platform.

Your continued use of the platform after changes take effect constitutes acceptance of the updated policy. We encourage you to review this policy periodically.