Privacy
YourTinyLink is a link shortener. We collect the information needed to run that service, protect accounts, stop abuse, and show useful link stats. We do not sell personal information, follow people around the web, or build profiles of visitors who click links.
What we collect
When you create an account, we store your username, display name, contact name when you provide one, email address, password hash, email verification status, MFA settings, and account settings.
When you create a short link, we store the destination URL, the short slug, the domain used for the link, ownership details, link state, and timestamps. We need this information so the link works and so you can manage it.
When someone uses a short link, we record aggregate stats such as clicks, referrer domain, coarse device/browser/operating-system groups, bot estimates, country and state or region, and estimated unique activity. We do not store full referrer URLs, city or postal location, coordinates, raw IP addresses, or raw user-agent logs for link analytics.
Estimated uniques use a one-day, keyed identifier that is automatically deleted after its short deduplication window. The identifier changes each day and is not used for persistent visitor tracking.
What we do not do
We do not sell personal information. We do not use advertising IDs, tracking pixels, cross-site tracking, or visitor fingerprinting. We do not use YourTinyLink to watch what people do on other websites.
We do not build ad profiles from link clicks. Link stats are for link owners to understand performance, not for identifying every person who clicked.
Accounts and security
We keep login sessions, verification codes, MFA records, API key records, and security logs so accounts can stay protected. API keys are stored as hashes; the raw key is only shown when it is created.
Security records may include things like login attempts, account changes, API activity, suspicious behavior, and admin actions. We keep this information only as long as needed for account protection, service reliability, abuse prevention, or legal requirements.
Payments
Paid plans use Stripe. Stripe handles payment card details. YourTinyLink stores the billing identifiers and subscription details needed to keep your plan active, apply limits, and provide support.
Emails and mailing lists
We send account email for things like verification, sign-in codes, password/security notices, billing notices, and service updates. If you join a beta list or mailing list, we store the signup details you submit so we can contact you about that list.
If you ask to leave a mailing list and you only exist as a mailing-list signup, we remove that signup instead of keeping you around as "disabled." If the same email belongs to a YourTinyLink account, leaving a mailing list does not delete the account, links, billing records, security records, or abuse records needed to run the service.
Cookies
Right now, YourTinyLink uses cookies and local storage for necessary things like login sessions, security, preferences, and keeping the site working. We do not use advertising cookies, marketing pixels, or third-party tracking cookies.
Because we only use necessary cookies, we do not show a cookie popup. If we ever add optional analytics, advertising, marketing, or other non-essential cookies, we will ask first where consent is required.
Abuse reports and safety
Privacy-first does not mean abuse-blind. We review reports of spam, phishing, malware, scams, impersonation, and other unsafe use. We may check destination domains against abuse or reputation sources before a short link is created.
Abuse and safety records may include the reported URL, destination domain, reason, source, related account or link, timestamps, and admin notes. We use this information to protect people, protect the platform, and respond to legitimate complaints.
Reporter contact email is optional. We do not give account holders reporter identities or raw reports, and reporters receive only high-level status updates rather than private enforcement details.
When we share information
We share information only when needed to run the service, process payments, send email, provide infrastructure, investigate abuse, comply with legal requirements, or protect YourTinyLink and its users.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
How long we keep things
Account information is kept while the account exists. Link information is kept while links need to work or while records are needed for account, billing, abuse, security, or legal reasons. Link stats are kept according to plan limits.
Mailing-list-only records are removed when you unsubscribe. Security and abuse records may be kept longer when needed to prevent repeat abuse, investigate incidents, or protect the service.
Cases that end with no violation are retained for one year. Enforcement and appeal records are retained indefinitely so decisions, strike history, and repeat abuse can be reviewed accurately.
Your choices
You can update your account information from account settings. You can leave mailing lists using the manage or unsubscribe link. You can ask us to access, correct, export, or delete information where required by law.
Some records cannot be deleted immediately if we need them for security, billing, abuse prevention, service operation, or legal reasons.
Contact
For privacy questions or requests, email privacy@yourtiny.link.