Privacy Policy

This Privacy Policy explains what information Shkurtoje ("we", "us") collects when you use our URL shortening and link management service (the "Service"), how we use it, and the choices you have. By using the Service you agree to the collection and use of information as described here.

1. Information We Collect

Account information

When you register, we collect your email address, username, and a securely hashed password (or an identifier from your OAuth provider if you sign in with a third-party account). If you subscribe to a paid plan, billing details are collected and processed directly by our payment processor, Stripe — we do not store full card numbers on our servers.

Link and usage data

We store the destination URLs you shorten, the short codes generated, any custom domain, password, or expiration you set, and metadata such as creation date and link owner.

Click analytics

When someone visits a shortened link, we log analytics data such as timestamp, referrer, approximate geographic location, device/browser type, and IP address (which may be partially anonymized or used only to derive location and flag suspicious activity). This data is shown to the link's owner in their dashboard.

Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your interface preferences (such as dark mode), and protect against fraud. Third-party services we use (see Section 3) may also set their own cookies or use similar tracking technologies, including for advertising purposes.

Support and communications

If you contact us or submit a link report, we collect the information you provide in order to respond and resolve the issue.

2. How We Use Information

• To provide, operate, and maintain the Service, including redirecting short links.
• To create and secure your account, including email verification and two-factor authentication.
• To process subscription payments and manage billing through Stripe.
• To generate the analytics and reporting features shown in your dashboard.
• To detect, investigate, and prevent abuse, spam, phishing, and other prohibited use of links.
• To send transactional emails, such as verification, password reset, and billing notices.
• To serve advertising that supports free use of the Service, where applicable.
• To comply with legal obligations and enforce our Terms of Service.

3. Third-Party Services

We rely on trusted third parties to operate the Service. Depending on configuration, these may include:

• Stripe — payment processing and subscription billing.
• Google Tag Manager / Google AdSense / Google Publisher Tag — analytics and advertising, where enabled.
• Advertising network partners — to display ads on interstitial and free-tier pages.
• Cloudflare Turnstile / reCAPTCHA — bot and abuse protection on forms.
• Web push notification providers — for optional browser push notifications, where enabled.
• OAuth identity providers — if you choose to sign in with a third-party account.
• Google Safe Browsing (or similar services) — to check submitted URLs for known threats.

These providers process data under their own privacy policies. We only share the information necessary for them to perform their function.

4. Data Sharing

We do not sell your personal data. We share information only with the third-party processors described above, when required by law, to protect the rights and safety of Shkurtoje and its users, or in connection with a business transfer such as a merger or acquisition.

5. Data Retention

We retain account and link data for as long as your account is active. Click analytics are retained to provide historical reporting. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, billing, or fraud-prevention purposes.

6. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, optional two-factor authentication, and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access, correct, or export the personal data we hold about you.
• Request deletion of your account and associated data, available directly from your account settings.
• Object to or restrict certain processing, including opting out of non-essential cookies where offered.
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, use the account deletion option in your dashboard settings or contact us using the details on our About page.

8. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. International Data Transfers

Your information may be processed and stored in countries other than your own, including by the third-party providers listed in Section 3. We take steps to ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

Questions about this Privacy Policy or our Terms of Service can be sent to the contact address listed on our About page.