1. Data we process
- Account data: email, display name, locale, timezone.
- Link data: slug, title, destination URL, status history.
- Scan analytics: timestamp, hashed IP, user agent, device and coarse location fields.
2. Why we process it
- To authenticate users and secure accounts.
- To provide dynamic redirects and downloadable QR assets.
- To show analytics and detect abuse.
3. Retention
- Account and link records are kept while your account is active.
- Security and audit logs are retained for operational and legal reasons.
- You may request deletion when allowed by law.
4. Processors
- Billing and tax processing is handled by Paddle.
- If you choose to sign in with Google, Google tells us your email address, whether it is verified, and your name. We keep no Google access or refresh tokens and never act on your Google account.
- Operational infrastructure providers may process data on our behalf under contract.
5. Your rights
- You can request access, correction, export, or deletion of your personal data.
- You can object to certain processing where applicable.
Need help with a privacy request?
Send your account email and request type (access, export, or deletion).
