Privacy Policy

This Privacy Policy explains how app.tl ("we," "us," or "our") collects, uses, and protects information when you use our link-shortening services (the "Service").

We try to collect as little as possible. Notably, we do not log individual clicks — see "Link analytics" below.

1. Information We Collect

Account information. When you create an account we collect your email address and, if you provide them, your name and optional profile details such as a job title or phone number. Authentication is handled by Google Firebase Authentication; if you sign in with a third-party provider, we receive the basic profile that provider shares.

Workspace content. We store the content you create in the Service: short links and their destination URLs, titles and custom handles, workspace names and handles, and any custom domains you connect.

API keys. If you create a workspace API key, we store only a short hint (the last few characters) and the key's permissions. The secret itself is stored as a salted, peppered digest and is shown to you exactly once, at creation. We cannot recover it for you.

Billing information. Payments are processed by Stripe. We receive and store your plan, subscription status, and billing identifiers. We never receive or store your full card number.

Technical data. Our hosting provider processes standard request data, including IP addresses, as a normal part of serving traffic and protecting against abuse.

2. Link analytics

When someone follows one of your short links, we increment a counter on that link. That is the whole of it.

We do not record the visitor's IP address, user agent, referrer, location, or the time of the click, and we do not create a per-click record. We do not build visitor profiles, and we do not set tracking cookies on your short links. This means we cannot provide detailed click analytics — that is a deliberate trade-off in favor of the privacy of the people who follow your links.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including resolving short links;
• Authenticate you and secure your account and workspaces;
• Process payments and manage subscriptions;
• Send transactional email such as password resets, email verification, and workspace invitations;
• Respond to support requests;
• Detect, investigate, and prevent abuse, fraud, and violations of our Terms.

We do not sell your personal information, and we do not use your data or your links to train machine-learning models.

4. How We Share Your Information

We share information only with service providers who process it on our behalf:

We may also disclose information if required by law, or to protect the rights, safety, and property of app.tl, our users, or the public.

Within a workspace, members can see the workspace's links, domains, and API key metadata. Workspace owners can see and manage content created by members.

5. Data Retention

We retain your information for as long as your account is active. Deleting a workspace permanently deletes its links, click counts, custom domains, and API keys. Deleting your account removes your authentication record and profile.

Deletion is immediate and cannot be undone. Backups and provider-side logs may persist for a limited period afterward.

6. Security

We use industry-standard measures to protect your information, including encryption in transit, httpOnly session cookies, server-side session verification on every request, and digest-only storage of API key secrets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update your profile and delete your workspaces and account from within the Service at any time. For anything else, contact us at the address below.

8. International Transfers

We operate in the United States, and our service providers may process information in the United States and elsewhere. If you access the Service from another country, you consent to that transfer.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date above. Material changes will be communicated through the Service or by email.

11. Contact Us

Questions about this Policy or your data? Email us at support@app.tl.