1. Information We Collect
When you use ShortyX, we may collect the following:
- Account Information: Name, email address, and hashed password when you register.
- Link Data: URLs you shorten, custom aliases, titles, and metadata.
- Click Analytics: IP addresses (anonymized), browser type, device type, country, and referrer URLs when someone clicks your links.
- Usage Data: Pages visited, features used, and interactions with our service.
- Contact Form Data: Name, email, and message when you contact us.
2. How We Use Your Information
- To provide and maintain our URL shortening service
- To generate click analytics and statistics for your links
- To communicate with you about your account and service updates
- To improve our service, fix bugs, and develop new features
- To prevent fraud, abuse, and enforce our Terms of Service
- To comply with legal obligations
3. Legal Basis for Processing (GDPR)
If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the specific context:
- Contract: We need your data to provide the service you requested.
- Consent: You have given us permission to process your data.
- Legitimate Interests: Processing is necessary for our legitimate business interests.
- Legal Obligation: We may need to comply with applicable laws.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies for:
- Essential Cookies: To maintain your login session and ensure site functionality.
- Preference Cookies: To remember your settings and preferences.
- Analytics Cookies: To understand how visitors use our site (anonymous).
- Advertising Cookies: Google AdSense may use cookies to serve personalized ads. Learn more.
You can disable cookies in your browser settings. However, some features may not work properly without cookies.
5. Google AdSense & Third-Party Advertising
We use Google AdSense to display advertisements on our website. Google uses cookies to serve ads based on your prior visits to our website and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings.
- We also comply with the Google AdSense Program Policies.
6. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Passwords are hashed using bcrypt (never stored in plain text)
- All data transmission is encrypted via HTTPS/SSL
- Database access is restricted and monitored
- IP addresses in analytics are anonymized
But no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Third-Party Services We Use
- IP Geolocation: To determine country-level location for link analytics.
- Email Delivery: To send account-related emails (verification, password reset).
- Google AdSense: To display advertisements on public pages.
These third-party services have their own privacy policies and we encourage you to review them.
8. Data Retention
We retain your data as long as your account is active or as needed to provide you services:
- Account data: Retained until account deletion is requested.
- Shortened links: Remain active unless deleted by you or due to policy violation.
- Click analytics: Retained for 12 months, then anonymized.
- Contact messages: Retained for 6 months for support purposes.
9. Your Data Protection Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data.
- Rectification: Correct any inaccurate or incomplete data.
- Erasure: Request deletion of your account and associated data ("Right to be forgotten").
- Portability: Export your link data in a machine-readable format.
- Objection: Object to processing of your personal data.
- Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us using the details below. We will respond within 30 days.
10. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes via:
- Email notification to registered users
- A prominent notice on our website
- Updated "Last updated" date at the top of this page
Your continued use of ShortyX after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights: