What we keep, and for how long

If you have an account

We keep your email address, to send you sign-in codes and messages about your account.

We keep the links you make: their short address, where they go, and the settings you choose, such as a password, an expiry date or a limit of one use. We also keep a history of the changes you make to them.

These stay for as long as you have an account. When your account is deleted, they are deleted with it. Copies in backups are removed as those backups are replaced.

When someone opens one of your links

Opening a short link needs no cookie and runs no script. We record when the request came, which link it was for, what we answered, and the kind of browser that asked. These records are deleted after 7 days. What we keep longer are totals for each day, which say how many, not who: they are deleted after 365 days.

To estimate how many people opened a link, we may turn the visitor’s network address into a code that belongs to one link and one day and can’t be turned back. We don’t keep the address itself, and the codes are deleted after 7 days.

We never show you who opened your link: no names, no network addresses, no codes.

Passwords and reports

When someone tries the password of a protected link, we keep a record of the attempt for 48 hours, to stop guessing, and a record that access was given for 30 days.

When someone reports a link, we keep their report so we can act on it. A code that tells repeat reports apart is removed after 30 days, and the text of the report after 365 days.

Files you download

QR codes you make, any logo you upload for them, and the files you export are kept for 7 days, then deleted. You can make them again.

On this website

Signing in sets a cookie that keeps you signed in. While you make your first link, this browser holds the link you pasted until the tab is closed. Nothing on this site tracks you for advertising.