ShorTul is designed to collect the minimum data necessary. For redirects we record: the shortcode, timestamp, country (from Cloudflare's CF-IPCountry header), device type, and referrer. Visitor IP addresses are hashed (SHA-256) for unique-visitor counting only — raw IPs are never stored.
When you create an account, we store your email and display name via Supabase Auth. Passwords are handled by Supabase Auth and never stored in plaintext.
We use Supabase Auth session cookies for logged-in functionality. No third-party tracking cookies.
We never sell or share your personal data. Data is processed by Cloudflare (edge network) and Supabase (database hosting).
Guest links expire after 24 hours and their KV records are removed. Click statistics are retained for analytics purposes. You may delete your account and data at any time.
Questions? Reach us on Telegram.