Privacy Policy — ShortMyURL

This Privacy Policy explains how ShortMyURL ("we", "us", or "our") collects, uses, and protects information when you use our URL shortening service (the "Service") available at https://url.tweetkar.com.

1. Information We Collect

We collect the following types of information:

Account Information: If you register, we collect your username, email address, and a securely hashed password.
Link Data: The destination URLs you shorten, any custom alias you choose, and optional settings such as passwords or expiry dates.
Click Analytics: When someone visits a shortened link, we may log the visitor's IP address, approximate geographic location (country/city), device type, browser, operating system, and the referring page.
Usage Data: General usage statistics such as the number of links created and clicks recorded.

2. How We Use Your Information

To operate, maintain, and improve the Service
To provide you with click analytics and reporting for your shortened links
To detect, prevent, and address technical issues, fraud, or abuse
To communicate with you regarding your account, if you have one

3. Cookies and Sessions

We use session cookies to keep you logged in and to protect forms from cross-site request forgery (CSRF). We do not use third-party advertising or tracking cookies beyond what is necessary to operate the sponsor/ad-rotation feature described in our Disclaimer.

4. Data Sharing

We do not sell your personal information. We may share limited data with third-party services strictly necessary to operate the Service, such as:

A free IP geolocation API used to approximate the country/city of clicks for analytics purposes
A QR code generation API used to create QR codes for your shortened links

These providers only receive the minimum data required (such as an IP address or a URL) to perform their function, and do not receive your account information.

5. Data Retention

We retain link and click data for as long as your account or link remains active, or as needed to provide the Service. You may request deletion of your account and associated links by contacting us.

6. Security

We take reasonable technical measures to protect your data, including password hashing, CSRF protection, and secure session handling. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, please contact us using the details on our Contact Us page.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

9. Contact Us

If you have any questions about this Privacy Policy, please reach out via our Contact Us page.