FreeurlThis Privacy Policy explains what information Freeurl ("we", "us") collects when you use https://freeurl.net and our short link service, why we collect it, and what choices you have. We try to collect as little as possible.
1. Information we collect
Information you give us
- Account details: your name, email address and a password (stored only as a salted hash).
- Links: the destination addresses, titles, aliases, expiry dates and passwords you set for your links (link passwords are stored as hashes).
- Messages: what you send us through the contact or report forms, and your email if you give it.
- Domains: custom domains you connect.
Information collected when someone clicks a short link
For each click we record the time, the country (and city when our network provider supplies it), the type of device, the browser and operating system, the site the visitor came from (the referrer), and a one-way hashed version of the IP address that we use to count unique visitors and to detect abuse. We do not store the plain IP address with the click and we do not know who the visitor is.
Information collected automatically on our website
Our servers log basic request information (IP address, browser, pages requested) for security and troubleshooting. Logs are kept for a short period. If analytics cookies are enabled, they measure aggregate traffic to our own website and only load after you accept them.
2. How we use it
- to provide the service: create and redirect links, show statistics and run your account;
- to keep the service safe: detect phishing, malware, spam and abuse, and enforce our Terms;
- to communicate with you: confirm your email, reset passwords, send service notices and reply to messages;
- to improve the product: understand which features are used and fix problems.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
3. Who we share it with
We use service providers who process data for us, such as hosting, email delivery and security checks (for example Google Safe Browsing, which receives link addresses we check). They may only use the data to provide their service to us. We may also disclose information when the law requires it or to protect people from harm, fraud or abuse.
4. Cookies
We use cookies that are necessary for signing in and keeping your session secure. We use optional analytics cookies only if you accept them in the cookie notice. See our cookie policy.
5. How long we keep data
Account and link data is kept while your account is open. Detailed click records are kept for as long as the link exists. Daily totals and statistics that do not identify anyone are kept longer. When you delete your account, your links stop working and your personal data is deleted, except where we must keep something to meet legal duties or to prevent abuse. Backups roll off within a short time.
6. Your choices and rights
You can see and edit your account details in Settings, delete your account at any time, and turn off public stats for your links.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, to have it deleted, to correct it and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined. You will not be treated differently for using these rights. Use the contact details below to make a request.
People in the EEA, UK and Switzerland (GDPR): our legal bases are performing our contract with you, our legitimate interests in running and securing the service, and your consent for optional cookies. You can ask for access, correction, deletion, restriction or a copy of your data, object to processing, withdraw consent, and complain to your data protection authority.
7. Security
We use encryption in transit (HTTPS), hashed passwords, access controls and monitoring. No system is perfectly secure, so please use a strong, unique password and turn on two-step sign-in.
8. International transfers
We operate from the United States and your information may be processed there and in other countries where our providers operate. Where required, we use appropriate safeguards for transfers.
9. Children
The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
10. Changes
If we change this policy in a significant way, we will update the date at the top and, where we can, notify you.
Ads on custom domains
People who connect their own domain may show ads on the short links that use it. When such an ad is shown, code from the owner's ad network runs inside an isolated frame on the ad page. That network may collect information such as your IP address, device, browser and cookies, under its own privacy policy. We do not control the network and we do not give it your clicks or any account data. Ads are always labelled "Advertisement". Search engine bots never see them.
Link safety checks
To keep short links safe, we check the destination address of a link when it is created or edited and later in the background. We may send the address (not your account details) to Google Safe Browsing and to an AI provider, and we may open the destination page from our server to look for phishing or program downloads. When a link is opened, a short check by our own system may happen first. We keep the result for a short time so we do not repeat the same check.
Support access
To help you with a problem, an authorised member of our team may open your account in a support view. This is limited to super admins, it is recorded in our activity log, and password, email, two-step login and account deletion cannot be changed in that view.
11. Contact
Privacy questions and requests: [email protected].