1. Data we process
- Account data: email, display name, locale, timezone.
- Link data: slug, title, destination URL, status history.
- Scan analytics: timestamp, hashed IP, user agent, device and coarse location fields.
2. Why we process it
- To authenticate users and secure accounts.
- To provide dynamic redirects and downloadable QR assets.
- To show analytics and detect abuse.
3. Retention
- Account and link records are kept while your account is active.
- Security and audit logs are retained for operational and legal reasons.
- You may request deletion when allowed by law.
4. Processors
- Billing and tax processing is handled by Paddle.
- Operational infrastructure providers may process data on our behalf under contract.
5. Your rights
- You can request access, correction, export, or deletion of your personal data.
- You can object to certain processing where applicable.
Need help with a privacy request?
Send your account email and request type (access, export, or deletion).
