Privacy Policy

What we collect

When you create an account, we collect your email address and display name. When you create short links, we store the original URL, the short code, and metadata about the link.

When someone clicks a short link, we collect:

• Timestamp of the click
• Referrer URL (where the click came from)
• Country and city (derived from IP via Vercel headers)
• Browser and operating system (derived from user agent)
• Device type (desktop, mobile, tablet)

We do not store raw IP addresses permanently. IP data is used only to derive geographic location and is not retained.

How we use your data

We use your data to:

• Provide the link shortening and analytics service
• Show you click analytics on your dashboard
• Process payments (via Stripe) if you upgrade to Pro
• Send transactional emails (password resets, account changes)

We do not sell your data. We do not run ads. We do not share your data with third parties except as required to provide the service (Firebase for auth/database, Stripe for payments, Vercel for hosting).

Third-party services

• Firebase (Google) — authentication and database
• Stripe — payment processing
• Vercel — hosting, edge functions and Web Analytics
• Google Safe Browsing — destination URLs are checked against its threat lists before a short link is created

Each of these services has their own privacy policy. We encourage you to review them.

Cookies

We use essential cookies for authentication (Firebase session) and one optional cookie if you turn on “exclude my clicks” in Settings. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

To understand how the marketing site is used we rely on Vercel Web Analytics, which is cookieless: it records page views without storing identifiers in your browser and does not track you across sites.

Data retention

Your account data is retained as long as your account is active. Click events are retained for the life of the link on both plans; the Free plan displays the last 7 days of click history and total counts, the Pro plan displays up to 90 days plus detailed breakdowns. Links shortened without an account expire after 7 days unless claimed. If you delete your account, we will delete your data within 30 days.

If your account is banned for violating our acceptable use policy, we retain limited identifiers (email address, account ID, and the reason for the ban) after the account is closed. We keep this on the basis of our legitimate interest in preventing banned users from re-registering and abusing the service.

Your rights

You can:

• Access your data at any time through the dashboard
• Update your email, name, or password in settings
• Delete your links and their associated analytics
• Request account deletion from Settings or by emailing us

Contact

Questions about this policy? Email hi@hshr.it.