ShortyLink

Privacy Policy

Your privacy is important to us. This Privacy Policy explains how ShortyLink ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our URL shortening service.

Last updated: January 16, 2026

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when using our service:

  • Account Information: Email address, name, and profile picture when you create an account or sign in with Google.
  • Link Data: URLs you shorten, custom aliases, titles, and any metadata you add to your links.
  • Payment Information: If you subscribe to a paid plan, our payment processor (Stripe) handles your payment details. We do not store your full credit card information.
  • Communications: Any information you provide when contacting our support team.

1.2 Information Collected Automatically

When you or others interact with shortened links, we automatically collect:

  • Click Analytics: Timestamp, referring website, and link performance metrics.
  • Device Information: Browser type, operating system, and device category (desktop, mobile, tablet).
  • Location Data: Approximate geographic location (country, city) derived from IP addresses. We do not store precise GPS coordinates.
  • IP Addresses: Collected for security, fraud prevention, and analytics purposes.

1.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for details.

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our URL shortening service
  • Process your account registration and manage your subscription
  • Generate analytics and insights about link performance
  • Detect and prevent fraud, abuse, and security threats
  • Send service-related communications (account updates, security alerts)
  • Respond to your inquiries and provide customer support
  • Comply with legal obligations and enforce our terms
  • With your consent, send marketing communications about new features and offers

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in these circumstances:

3.1 Service Providers

We work with trusted third-party providers who assist in operating our service:

  • Supabase: Database and authentication services
  • Vercel: Hosting and infrastructure
  • Stripe: Payment processing
  • Google: Authentication (OAuth)

3.2 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

3.4 With Your Consent

We may share information for other purposes with your explicit consent.

4. Data Retention

We retain your information for as long as:

  • Your account is active
  • Needed to provide our services
  • Required by law or for legitimate business purposes

Click analytics data is retained for 24 months. You can request deletion of your account and associated data at any time.

5. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain processing of your data
  • Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@shortylink.co.

6. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication requirements
  • Secure password hashing and storage

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

8. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: