California Privacy Notice
This notice supplements our Privacy Policy and applies to California residents under the California Consumer Privacy Act, as amended by the CPRA.
Effective date: August 4, 2026
Last updated: August 4, 2026
This page is a general template provided for convenience and is not legal advice. Please consult the actual, signed policy for your account — and your own legal counsel — for specifics that apply to you.
1. Scope
If you are a California resident, this notice describes the categories of personal information [Company Legal Name] collects about you through TinyURLShortening.com, why we collect it, and the rights you have. Everything in our Privacy Policy also applies.
2. Categories of personal information we collect
| CCPA category | Examples we collect | Source |
|---|---|---|
| Identifiers | Email address, account ID, IP address of link visitors | You; visitors to your short links |
| Commercial information | Plan tier, subscription status, billing history | You; Stripe |
| Internet or network activity | URLs you shorten, click timestamps, referrer, browser/user agent, pages viewed on our site | You; automatic collection |
| Geolocation data | Approximate country/region derived from IP address (not precise location) | Automatic collection |
| Electronic/commercial communications | Support emails and their contents | You |
| Inferences | Aggregate engagement trends for your links | Derived from the above |
We do not collect sensitive personal information as defined by the CPRA, and we do not knowingly collect personal information from anyone under 16.
3. Purposes for collection
- Providing the service: accounts, magic-link sign-in, redirects, custom domains, and analytics reporting.
- Billing and subscription management for paid plans.
- Transactional email and customer support.
- Security, fraud prevention, and enforcement of our acceptable use rules.
- Product improvement using aggregated usage data.
- Legal compliance.
4. Disclosure of personal information
In the past 12 months we have disclosed the categories above to service providers for business purposes only: Supabase (database and auth), Stripe (payments), Cloudflare (redirects and security), Vercel (hosting), and Resend (transactional email). Each is contractually restricted to using the data solely to provide services to us.
5. Do Not Sell or Share My Personal Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months, including for consumers we know to be under 16.
Because we do not sell or share personal information, there is nothing to opt out of. If this ever changes we will update this notice and provide a working opt-out link before any such activity begins. You may still submit an opt-out request at any time by emailing [contact@tinyurlshortening.com] with the subject line "Do Not Sell or Share My Personal Information", and we will honor it. We also honor Global Privacy Control (GPC) browser signals as valid opt-out requests.
6. Your California rights
- Right to know. Request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the third parties we disclosed it to.
- Right to delete. Request deletion of personal information we collected from you, subject to legal exceptions.
- Right to correct. Ask us to fix inaccurate personal information.
- Right to opt out of sale or sharing. As described above — we do not sell or share, and we honor GPC signals.
- Right to limit use of sensitive personal information. We do not collect sensitive personal information, so there is nothing to limit.
- Right to non-discrimination. We will never deny you service, charge you a different price, or give you a lower quality experience for exercising these rights.
7. How to exercise your rights
Email [contact@tinyurlshortening.com] from the address associated with your account, or write to us at [Mailing Address]. Tell us which right you want to exercise. We will confirm receipt within 10 business days and respond within 45 days (extendable by another 45 days with notice).
To protect your data, we verify requests by confirming control of the account email and, where necessary, additional account details. An authorized agent may submit a request on your behalf with written permission; we may still contact you to confirm.
8. Contact
[Company Legal Name]
[Mailing Address]
[contact@tinyurlshortening.com]