🔒 Privacy

Privacy Policy

Last updated: January 1, 2025 · We take your privacy seriously.

Table of Contents

  1. Overview
  2. Data We Collect
  3. How We Use Your Data
  4. Click Tracking
  5. Data Sharing
  6. Cookies
  7. Data Retention
  8. Security
  9. Your Rights
  10. Advertising & Google
  11. Children's Privacy
  12. Changes to Policy
  13. Contact Us

The short version: We collect only what we need to run the service. We don't sell your personal data. You can request deletion of your data at any time. Click analytics are anonymized and aggregated.

1. Overview

This Privacy Policy explains how ShortLinks.me ("we," "us," or "our") collects, uses, and protects information when you use our URL shortening and link management service at shortlinks.me.

We are committed to protecting your privacy and handling your data in a transparent and responsible manner. This policy applies to all users of our website and services.

2. Data We Collect

Account Information

When you register, we collect:

  • Name and email address
  • Password (stored as a secure bcrypt hash — never in plain text)
  • Payment information (processed by Stripe — we never store card numbers)
  • PayPal email address (if you use the referral payout feature)

Links & Content

When you use the Service, we collect:

  • URLs you shorten and their associated settings
  • Custom aliases, titles, and UTM parameters you set
  • Bio page content you create (text, links, images)
  • QR code configurations

Click Analytics Data

When someone clicks your short links, we automatically collect:

  • IP address (used for geo-location, then discarded after processing)
  • Approximate country and city (derived from IP)
  • Browser type and version
  • Device type (mobile, tablet, desktop)
  • Referring domain (the website the visitor came from)
  • Timestamp of the click

We do not store full IP addresses in our analytics database. IPs are used only to determine country/city and are not retained after processing.

Technical Data

We automatically collect standard server logs including IP addresses, browser user agents, and pages visited. These are used for security monitoring and are deleted after 30 days.

3. How We Use Your Data

PurposeData UsedLegal Basis
Providing the ServiceAccount info, links, settingsContract performance
Processing paymentsEmail, Stripe customer IDContract performance
Providing analytics to youClick data, geo, deviceLegitimate interest
Sending transactional emailsEmail addressContract performance
Security & fraud preventionIP, usage patternsLegitimate interest
Improving the ServiceAggregated usage dataLegitimate interest
Marketing emails (opt-in)Email addressConsent

4. Click Tracking & Analytics

When anyone clicks a short link you have created, we record analytics data on your behalf so you can understand how your links are performing. This is a core part of the Service.

Visitors clicking your short links should be aware that:

  • Their country, device type, and browser may be logged
  • The referring website they came from may be recorded
  • This data is visible to the owner of the short link
  • Full IP addresses are not stored or shown to link owners

If you are a link owner and you share a short link publicly, you are responsible for informing your audience that click tracking occurs, where required by applicable law (e.g., GDPR).

5. Data Sharing

We do not sell your personal data to third parties. We may share data with:

  • Stripe — for payment processing. Governed by Stripe's Privacy Policy.
  • Email service providers — to send transactional and notification emails.
  • Law enforcement — when required by valid legal process (court orders, subpoenas).
  • Successors — in the event of a merger, acquisition, or sale of assets, with notice to you.

All third-party service providers are contractually bound to use your data only for the purposes we specify.

6. Cookies

Our Cookies

We use the following first-party cookies:

CookiePurposeDuration
shortlinksme_sessAuthentication session — keeps you logged inSession / 30 days
csrf_tokenSecurity — prevents cross-site request forgerySession
bio_unlock_*Remembers password-unlocked bio pagesSession

Google AdSense Cookies (Free Plan)

On pages shown to free-plan users and visitors, we display Google AdSense advertisements. Google may set third-party cookies including:

CookiePurposeDuration
__gads / __gpiGoogle ad personalization and frequency capping13 months
NID / DSIDGoogle ad targeting based on browsing history6 months
IDEDoubleClick — ad conversion tracking13 months

These cookies are set by Google, not by us. They allow Google to serve personalized ads based on your interests and browsing history across websites. Paid subscribers do not have ads shown and are not subject to these cookies.

You can opt out of Google's personalized advertising at google.com/settings/ads or via the NAI opt-out tool. You can also disable cookies entirely in your browser settings, though this will prevent you from logging into your account.

7. Data Retention

  • Account data — retained while your account is active and for 30 days after deletion
  • Click analytics — retained for 2 years, then automatically purged
  • Server logs — deleted after 30 days
  • Payment records — retained for 7 years as required by financial regulations
  • Deleted links — removed immediately; associated analytics removed within 30 days

8. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • HTTPS/TLS encryption for all data in transit
  • Bcrypt hashing for all passwords
  • CSRF protection on all forms
  • Rate limiting to prevent brute-force attacks
  • Regular security monitoring and log review

However, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at privacy@shortlinks.me.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of your personal data
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your account and data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — unsubscribe from marketing emails at any time

To exercise any of these rights, email us at privacy@shortlinks.me. We will respond within 30 days.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

10. Advertising & Google AdSense

How We Use Advertising

To support the free tier of our Service, we display third-party advertisements on pages viewed by free-plan users and unauthenticated visitors. We use Google AdSense for this purpose.

Data Google Collects

When ads are shown, Google may collect and process the following data about visitors:

  • IP address and approximate location
  • Browser type, language, and device information
  • Pages visited and browsing behavior across Google partner sites
  • Interests inferred from browsing history (for personalized ads)

This data is governed by the Google Privacy Policy, not this policy. We encourage you to review it.

Personalized vs. Non-Personalized Ads

By default, Google may serve personalized ads based on your browsing history. You can opt out of personalized advertising at any time via Google Ads Settings.

No Ads for Paid Users

Users on paid plans (Starter, Growth, Business) do not have advertisements shown on their account pages, links, or bio pages.

GDPR & Consent

If you are located in the European Economic Area, Google is required to obtain your consent before serving personalized ads. Google manages this consent through its own consent framework. We do not independently collect consent for Google's data processing.

11. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service at least 14 days before changes take effect. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, requests, or concerns:

  • Email: privacy@shortlinks.me
  • Website: shortlinks.me

We aim to respond to all privacy inquiries within 5 business days.

📄 Terms of Service → ← Back to ShortLinks.me
© 2026 shortlinks.me. All rights reserved.
Terms of Service Privacy Policy