Privacy Policy

Account data: when you sign in with Google we receive your name, email address, and profile picture. We use these to create and display your account. We never see your Google password.

Content you create: your links, slugs, QR settings, bio pages, and any images you upload.

Click analytics: when someone opens one of your links we record the event with coarse context — country and city derived from the IP address, device type, operating system, and referrer. The IP address itself is not stored with the click; visitor uniqueness is computed from a salted hash that cannot be reversed.

We use your data to operate the product: serve your redirects, render your bio pages, show you analytics, and keep the platform safe (for example, scanning destination URLs against safety services).

We do not sell your personal data, and we do not use your audience’s click data for advertising.

The dashboard uses two httpOnly session cookies to keep you signed in. They are not used for tracking and contain no personal profile data.

The redirect flow itself sets no tracking cookies on your visitors.

Data is stored in managed database, cache, and object-storage services. Access is restricted to what the product needs to run.

Your data is kept while your account is active. Deleting your account from Settings removes your profile, links, bio pages, and associated analytics from production systems; short-lived backups age out on their own schedule.

You can edit or delete individual links and bio pages at any time, export nothing you did not create, and delete your entire account from Settings. Profile name and picture sync from your Google account — update them there.

If we make material changes we will make reasonable efforts to notify you, for example by email or an in-app notice. The “last updated” date above always reflects the current version.