Privacy policy

At Shortn ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening service.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email address, username, and password when you create an account
Profile Information: Display name, profile picture, and phone number (optional)
Payment Information: Payment processing is handled by our payment processor, Polar.sh. We do not store your credit card details
Content: URLs you shorten, custom aliases, QR codes, bio pages, and any metadata you provide
Communications: Messages you send to us through contact forms or support channels

1.2 Information Automatically Collected

Usage Data: Information about how you use our service, including clicks, scans, and interactions with shortened links
Device Information: IP address, browser type, operating system, device type, and unique device identifiers
Location Data: Approximate geographic location based on IP address
Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain sessions and analyze usage patterns
Analytics Data: Click-through rates, referrer information, and performance metrics for your shortened links

2. How We Use Your Information

We use the information we collect for the following purposes:

Provide Services: Create and manage shortened URLs, QR codes, and bio pages
Account Management: Maintain your account, authenticate users, and provide customer support
Analytics: Provide you with click analytics, visitor statistics, and performance insights
Service Improvement: Analyze usage patterns to improve our service and develop new features
Security: Detect, prevent, and address fraud, abuse, and security issues
Communications: Send you service updates, security alerts, and support messages
Marketing: Send promotional communications (with your consent, where required)
Legal Compliance: Comply with legal obligations and enforce our Terms of Service

We may share your information in the following circumstances:

Payment Processing: Payment information is processed by Polar.sh, our payment service provider. Please refer to Polar's Privacy Policy for details on how they handle your data
Service Providers: Third-party vendors who perform services on our behalf (e.g., hosting, email delivery, analytics)
Business Transfers: In connection with a merger, acquisition, or sale of assets
Legal Requirements: When required by law or to protect our rights, safety, or property
With Your Consent: With your explicit consent for specific purposes

We do not sell your personal information to third parties.

4. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

Account Data: Retained until you delete your account or request deletion
Shortened Links: Retained indefinitely unless you delete them or delete your account
Analytics Data: Aggregated data may be retained indefinitely for statistical purposes
Legal Requirements: Some data may be retained longer to comply with legal obligations

5. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request access to your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal data
Data Portability: Request a copy of your data in a machine-readable format
Opt-Out: Unsubscribe from marketing communications
Object: Object to certain processing of your data
Restrict: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at [email protected]

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or alteration. These measures include:

Encryption of data in transit using SSL/TLS
Secure storage of passwords using industry-standard hashing
Regular security audits and vulnerability assessments
Access controls and authentication mechanisms
Employee training on data protection practices

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Cookies and Tracking

We use cookies and similar tracking technologies to:

Maintain your session and keep you logged in
Remember your preferences and settings
Analyze usage patterns and track link performance
Improve security and prevent fraud

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our service.

8. Third-Party Links

Our service allows you to create shortened links to external websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any websites you visit through our shortened links.

9. Children's Privacy

Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

We process your data based on the following legal grounds: contract performance, legitimate interests, legal obligations, and your consent.

12. California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect
Right to know if we sell or share your personal information
Right to access your personal information
Right to delete your personal information
Right to opt-out of the sale of your personal information
Right to non-discrimination for exercising your rights

We do not sell your personal information. To exercise your CCPA rights, please contact us at [email protected]

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Support: [email protected]