Privacy Policy
Linkly is a URL shortener. This page explains what data the service handles, why, how long it is kept, and how to remove it. It describes the current version of the service and applies to the hosted Linkly site.
1. Information we collect
Account information. When you sign in with Google, Firebase Authentication provides your Google account identifier, display name, email address and profile photo URL. We use your Firebase user ID to associate links with your account.
Links you create. We store the destination URL, short code, creation time, optional expiration time, click totals and per-day click buckets.
Click analytics. When someone follows a Linkly short link, we record the short code, referring host, a coarse device type (Desktop, Mobile or Tablet) and a two-letter country code when the hosting platform supplies one. Click records do not store the visitor's IP address or full user-agent string.
Rate-limit data. Short-lived records may contain the requesting IP address so the service can limit abuse. These records expire automatically and are not used for analytics.
Local browser storage. Your theme preference and a list of recent links you created are stored in your browser's local storage. They stay on your device and can be cleared from the Linkly interface or your browser settings.
2. How we use information
- To authenticate you and show your dashboard.
- To create, redirect and manage short links, including expiration.
- To calculate click totals, daily trends and traffic breakdowns for link owners.
- To prevent abuse, enforce rate limits and keep the service available.
- To respond to reports, support requests and legal obligations.
We do not sell personal information and we do not use click data for advertising.
3. Service providers
Linkly relies on Google Firebase for sign-in and account administration, MongoDB Atlas for database hosting, and Vercel for application hosting and edge delivery. These providers process data on our behalf under their own terms and privacy policies. Google may also set authentication-related cookies when you sign in.
4. Retention
- Click-event records are automatically removed after 90 days.
- Expired links and their click events are removed by a scheduled cleanup job.
- Links remain until you delete them, your account is deleted, or they expire and are cleaned up.
- Account records remain until you delete your account.
- Operational logs may be retained for a limited period by the hosting providers.
5. Deleting your data
You can delete individual links from the dashboard. To delete your entire account, open the account menu and choose Delete account. This removes your links and click records and deletes your Firebase authentication account. Deletion cannot be undone.
You can clear the recent-links list stored on your device with the Clear button on the home page.
6. Security
We use HTTPS, short-lived authentication tokens, owner checks on link management endpoints, rate limiting and access controls on the database. No online service can guarantee absolute security, so please use a strong, unique Google account and report suspected abuse.
7. Children
Linkly is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us so we can remove it.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, export or delete your personal information, or to object to certain processing. The dashboard provides deletion controls; for other requests, contact us through the project's issue tracker.
9. Changes
We may update this policy as the service changes. The date at the top of this page shows the latest revision. Material changes will be communicated on the site where practical.
10. Contact
Questions or privacy requests: open an issue in the Linkly repository.