Privacy Policy

1. Who we are

TinyURLShortening.com is a URL shortening service operated by [Company Legal Name]. We provide custom domains, branded short links, and click analytics. You can reach us at [contact@tinyurlshortening.com] or by mail at [Mailing Address].

2. What we collect and why

We keep data collection to what the service actually needs to work:

• Account information. Your email address, which we use to create your account and sign you in with a magic link. We do not store passwords.
• Links you create. The destination URLs you shorten, the short slugs and custom domains you configure, plus any titles or tags you add. We need this to redirect visitors correctly.
• Click analytics. When someone clicks one of your short links we record the timestamp, the referring page, the user agent, the IP address, and a general location (typically country or region) derived from that IP address. This is how we produce the click reports in your dashboard.
• Billing information. If you subscribe to a paid plan, our payment processor collects and stores your payment details. We receive only a customer identifier, plan, and subscription status — we never see or store full card numbers.
• Support messages. Anything you send us by email, so we can help you and keep a record of the conversation.

3. How we use your data

• To operate the service: create your account, resolve short links, and show you analytics.
• To bill you and manage your subscription on paid plans.
• To send transactional email such as magic-link sign-in, receipts, and important service notices.
• To detect and prevent abuse — phishing, malware distribution, spam, and other prohibited uses of the shortener.
• To improve the product using aggregated, non-identifying usage trends.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal information, and we do not use your link data to build advertising profiles.

4. Third-party subprocessors

We rely on a small set of vendors to run the service. Each processes data only on our instructions:

• Supabase — database and authentication (accounts, links, analytics records).
• Stripe — payment processing and subscription billing.
• Cloudflare — serving link redirects, edge delivery, and abuse/DDoS protection.
• Vercel — application hosting.
• Resend — transactional email delivery.

We may also disclose information when required by law, to enforce our terms, or as part of a merger or acquisition (in which case we will tell you first).

5. Data retention

• Account data is kept while your account is active and for a short wind-down period after you close it.
• Links and their click analytics are kept while your account is active. Deleting a link removes it from your dashboard and disables the redirect; associated raw click records are removed on our normal deletion cycle.
• After account deletion we remove or anonymize personal data within roughly 30 days, except where we must keep records longer for tax, accounting, or legal reasons (typically billing records).
• Aggregated statistics that cannot identify you or your visitors may be retained indefinitely.

6. Cookies and tracking

On the TinyURLShortening.com website we use cookies and similar storage that are strictly necessary to keep you signed in and to remember basic preferences. We may use privacy- respecting analytics to understand how the marketing site is used.

Short-link redirects themselves are measured server-side. We log the click event as described above rather than placing tracking cookies in your visitors' browsers on your behalf. Most browsers let you block or delete cookies; blocking essential cookies will prevent you from signing in.

7. Your rights

Whatever your location, you can ask us to:

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete your account and associated personal data.
• Export your links and analytics.
• Object to or restrict certain processing, and opt out of non-essential email.

Email [contact@tinyurlshortening.com] and we will respond within 30 days. We may need to verify your identity first. California residents have additional rights — see our California Privacy Notice.

8. EU and UK users

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of our contract with you (running your account and links), our legitimate interests (security, abuse prevention, product improvement), your consent where we ask for it, and compliance with legal obligations.

You have the rights listed above plus the right to data portability and the right to lodge a complaint with your local supervisory authority. Because our vendors are largely US-based, your data may be transferred outside the EEA/UK; where that happens we rely on Standard Contractual Clauses or an equivalent transfer mechanism with each subprocessor. For your own links, you are generally the data controller for the click data collected through them and we act as your processor.

9. Security

Data is encrypted in transit with TLS and at rest by our infrastructure providers. Access to production data is limited to staff who need it. No service can promise perfect security, but we will notify affected users and regulators as required if a breach occurs.

10. Children

The service is not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the product changes. We will revise the "last updated" date above and, for material changes, notify account holders by email before the change takes effect.

12. Contact us

[Company Legal Name]
[Mailing Address]
[contact@tinyurlshortening.com]