What we keep.
Updated 21 October 2026
Links
We store the link ID, destination, hash of its deletion key, optional expiry, password hash and remaining-open limit. Account links also store their owner and creation time. Guest links have no account owner. Destination URLs may contain personal data; avoid putting secrets in them.
Accounts and cookies
An optional account stores your login, email and password hash. Passwords are hashed with scrypt. We do not verify email addresses or send mail. Signing in sets one necessary HttpOnly, Secure, SameSite session cookie for 30 days; its token is stored as a hash. Guests do not receive an application cookie. Language is kept in the URL. Theme and display time zone are saved only in your browser’s local storage; they are not sent to the server.
No click history
We do not keep visitor profiles, analytics, referrers, device fingerprints, IP histories or HTTP request logs. We do not sell account or link data. There are no ads. A limited link keeps only the number of opens left, without times, IPs or visitor records.
Request limits
The server briefly processes IP addresses and account identifiers to limit abuse. Salted hashes and counters exist only in bounded server memory and expire after seconds or minutes. Sign-in and password checks have stricter limits than the general 1000 requests/second/IP threshold.
Deletion
A deletion key removes its link. A signed-in owner can also remove saved links. Deleting an account removes its sessions and all owned links. Guest links stay independent. Expired links stop working immediately and are removed when next accessed. Expired sessions are rejected immediately and cleaned in batches. Provider backups may retain old copies; temporary migration backups are kept privately for recovery, then removed. Lost deletion keys and passwords cannot currently be recovered.
Network and limits
This service removes the browser Referer on outgoing navigation. It does not hide your IP or erase destination parameters and cookies. Cloudflare, the VPS provider and destination sites may process network information under their own policies; application no-logs behavior is not a promise about those providers.