What we keep.
Updated 21 October 2026
Links
We store the link ID, destination, hash of its deletion key, optional expiry, opening mode, password hash, remaining-open limit and one aggregate open counter. Account links also store their owner and creation time. Guest links have no account owner. Destination URLs may contain personal data; avoid putting secrets in them.
Accounts and cookies
An optional account stores your nickname and password hash. No email is required or stored; email addresses collected by the previous version are cleared by this update. Passwords are hashed with scrypt. Signing in sets one necessary HttpOnly, Secure, SameSite session cookie for 30 days; its token is stored as a hash. Guests do not receive an application cookie. Language is kept in the URL. The theme is saved only in your browser’s local storage; it is not sent to the server.
No click history
We do not keep visitor profiles, referrers, device fingerprints, IP histories or HTTP request logs, and use no third-party analytics. Each link stores one total open counter. Direct links count a successful GET handoff; confirmation pages count a successful Continue submission. HEAD, invalid passwords and viewing a confirmation page do not count. Counts are not unique visitors and may include automated previews of direct links. There are no per-visit records, timestamps, IPs or devices. Account owners see totals for their links; older links start from zero at this update. We do not sell account or link data. There are no ads.
Request limits
The server briefly processes IP addresses and account identifiers to limit abuse. Salted hashes and counters exist only in bounded server memory and expire after seconds or minutes. Sign-in and password checks have stricter limits than the general 1000 requests/second/IP threshold.
Deletion
A deletion key removes its link. A signed-in owner can also remove saved links. Deleting an account removes its sessions, all owned links and their counters. Guest links stay independent. Expired links stop working immediately and are removed when next accessed. Expired sessions are rejected immediately and cleaned in batches. Provider backups may retain old copies; temporary migration backups are kept privately for recovery, then removed. Lost deletion keys and passwords cannot currently be recovered.
Network and limits
This service removes the browser Referer on outgoing navigation. It does not hide your IP or erase destination parameters and cookies. Cloudflare, the VPS provider and destination sites may process network information under their own policies; application no-logs behavior is not a promise about those providers.