Privacy Policy

We intentionally collect as little personal data as possible. SHRT does not require you to register an account in order to shorten a link.

• Link data: the long destination URL you submit, the generated short slug, and timestamps.
• Optional custom slug: if you choose one, it is stored as part of the public link.
• Technical metadata: a per-browser identifier stored in your local browser storage so you can see your own recent links.
• Server logs: standard request logs (IP address, user-agent, referer, timestamp) kept for security, abuse prevention and debugging.
• Aggregate click metrics: number of times a short link was opened. We do not build advertising profiles from this data.

We use the data only to provide and improve the service.

• To create, store, and serve redirects from short links to their destinations.
• To show you a list of links you created from the same browser.
• To prevent, detect and respond to abuse, fraud, malware, phishing or other security threats.
• To monitor service health, fix bugs and improve performance.
• To comply with legal obligations and enforce our Terms.

Where European or UK data protection law applies, we rely on the following legal bases: (a) performance of a contract with you, when you actively use the service to shorten links; (b) our legitimate interests in keeping the service secure, abuse-free and reliable; and (c) compliance with legal obligations.

We do not use advertising or third-party tracking cookies. We use your browser's local storage to remember the language you selected and the short links you have created so we can show them back to you. You can clear this at any time from your browser settings or by using the "Clear all" action in the app.

Your destination URL is, by its nature, public — anyone with the short link can open it. Beyond that:

• We do not sell, rent or trade personal data.
• We use trusted infrastructure providers (hosting, database, edge network) that process data on our behalf under appropriate contractual safeguards.
• We may disclose data when legally required to do so by a valid court order, subpoena or other lawful request, or to protect the rights, safety and property of users and the public.

Our infrastructure providers may process and store data in countries other than the one you are in. Where required, we rely on standard contractual safeguards to protect your data wherever it is processed.

Short links are retained for as long as needed to provide the service. We may delete links at any time if they are inactive for an extended period, or if they are reported or detected as abusive (spam, malware, phishing, illegal content, etc.). Server access logs are kept for a short rolling window for security purposes and then deleted or anonymised.

You may not use SHRT to create links that lead to:

• Malware, phishing, scams, or other security threats.
• Illegal content, content that infringes intellectual property, or content that violates third-party rights.
• Sexual content involving minors, or content that incites violence, hatred or discrimination.
• Spam or large-scale automated abuse.

Depending on where you live, you may have rights including: access, rectification, deletion, restriction, objection, and data portability. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.

SHRT is not directed to children under 13 (or the equivalent age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We apply reasonable technical and organisational measures to protect data against loss, misuse and unauthorised access. No service on the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest change. Continued use of SHRT after an update means you accept the updated policy.

If you have any questions about this Privacy Policy or want to exercise your rights, contact us at privacy@shrtly.site.