Built with care

Your privacy matters.

Go stores the links you create and the account information you provide so you can manage your sharing. Passwords for your account are handled by Supabase Authentication. Link passwords are stored only as salted hashes.

What a click records

Successful link visits record a timestamp, referring website hostname, broad device and browser categories, and a heuristic bot label. We do not store raw IP addresses, full referring URLs, user-agent strings, or device fingerprints. Country information is not collected.

Cookies and abuse prevention

Essential cookies keep you signed in and remember a password-protected link unlock for 15 minutes. Hashed, short-lived rate-limit identifiers help reduce abuse. If enabled by the operator, Cloudflare Turnstile processes challenge information to prevent automated abuse.

Retention and control

Detailed click records are retained for up to 90 days, moderation audit records for up to one year, and resolved reports for up to 90 days. Lifetime click totals remain with links. Deleting a link disables its URL and retains a tombstone to prevent code reuse. Account removal must be requested from the deployment operator; it removes associated links and click data. Retention depends on the operator scheduling the included cleanup job.

Access and service providers

You can access analytics for links you own. Authorized administrators can moderate links and accounts. Supabase provides authentication and database hosting. The deployment operator is responsible for publishing their identity, privacy contact, hosting locations and any additional processing before public launch.