Legal

Privacy Policy

Last updated: June 1, 2026

Shorturlfy (“we”, “our”, or “us”) is committed to protecting your privacy. This policy explains what information we collect when you use our service, how we use it, and the choices you have.

1

Information We Collect

  • Account information: When you register, we collect your email address and password (hashed). You may optionally provide a name and profile photo.
  • Link data: We store the original URLs you shorten, the short codes you create, optional expiration dates, and any tags you assign.
  • Usage data: We log click events on your short links including timestamp, country, device type, browser, and referrer URL. We do not log the full IP address of link visitors — only the first two octets are retained for geographic resolution.
  • Service data: Standard server logs capture your IP address, browser user agent, and pages accessed within the Shorturlfy dashboard. These are retained for 30 days for security and abuse prevention.
2

How We Use Your Information

  • To operate and improve the service: powering your dashboard, generating analytics, and resolving short links.
  • To communicate with you: sending transactional emails (password reset, plan receipts) and, if you opt in, product updates.
  • To detect and prevent abuse: identifying spam links, phishing attempts, and fraudulent account activity.
  • We do not sell, rent, or trade your personal information to third parties for marketing purposes.
3

Cookies & Tracking

  • We use strictly necessary cookies to maintain your session after login. We do not use third-party advertising cookies.
  • We use a first-party analytics cookie to count unique visits to your short links. This cookie contains a random identifier and does not track visitors across other websites.
  • You can disable cookies in your browser settings. Disabling session cookies will prevent you from logging in.
4

Third-Party Services

  • Payment processing: Stripe processes all subscription payments. We store only your plan tier and billing email — never your card details.
  • Infrastructure: We use cloud hosting providers (currently AWS) who are bound by data processing agreements compliant with applicable privacy regulations.
  • Email delivery: Transactional emails are sent via a third-party email service. Only your email address and the content of the message are shared.
5

Data Retention

  • Account data is retained for as long as your account is active. You may delete your account at any time from Settings → Account → Delete account.
  • Deleted accounts and their associated links are permanently removed within 30 days.
  • Aggregated, anonymised analytics (total click counts) may be retained indefinitely for product improvement purposes.
6

Your Rights

  • Access: You can export all your link data and analytics from the dashboard at any time.
  • Correction: Update your account information at any time from your profile settings.
  • Deletion: Request full deletion of your account and data by emailing privacy@shorturlfy.com or via Settings → Delete account.
  • Portability: Export your links as CSV from the dashboard.
  • If you are in the European Economic Area, you have additional rights under the GDPR including the right to object to processing and to lodge a complaint with your local supervisory authority.
7

Contact Us

  • If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@shorturlfy.com.
  • Shorturlfy, Inc. · 340 Pine Street, Suite 800 · San Francisco, CA 94104 · United States