Account and link data
We store account details, destination URLs, short-link settings, lifetime click totals and one aggregate click total per calendar day.
Minimal data, practical operation.
We keep only the information required to run accounts, links, aggregate counters and abuse reporting.
Reports
A reporter may optionally provide an email address and details. We do not persist reporter IP addresses, devices, browsers or referrers.
Security
Session cookies are HTTP-only and secure in production. Administrative actions require an authenticated administrator session.