Privacy Policy

Last updated: October 2026

1. What We Collect

When you use ShortLink, here's what we store:

  • The URLs you shorten: We keep the original URL and the short slug so the redirect works.
  • Click data: We record a timestamp for each click. To give you useful stats, we may also record the visitor's IP address, browser type (user agent), and referrer.
  • Session cookies: We set a small cookie to keep the admin and user dashboards logged in. It doesn't track you across sites.
  • Bot verification data: When you submit forms (such as creating short links, registering an account, or submitting inquiries), Cloudflare Turnstile analyzes browser and device telemetry to prevent spam and abuse.

2. How We Use That Data

We use the information we collect for exactly these purposes:

  • Keeping the URL shortening and redirect service running
  • Showing link owners their click statistics
  • Monitoring the service for performance and abuse
  • Enforcing our Terms of Service

That's the full list. Nothing else.

3. Data Sharing

We don't sell, trade, rent, or share your personal data with anyone. High-level aggregate numbers (like total links created) might be shown publicly, but those are completely anonymized.

4. How Long We Keep Data

Your shortened URLs and their stats stick around until you or an administrator deletes them. We periodically run cleanups to clear out links that have been dead for a long time, just to keep things tidy.

5. Security

We take reasonable precautions to protect your data – prepared SQL statements to block injection attacks, CSRF protection on all forms, encrypted passwords, and secure session handling. That said, nothing sent over the internet is ever 100% guaranteed.

6. Cloudflare Turnstile & Bot Prevention

To defend our application against automated bots, spam submissions, and malicious scraping, we utilize Cloudflare Turnstile (including in invisible mode). Turnstile evaluates device, browser, and network characteristics to distinguish legitimate human visitors from automated agents without using tracking cookies.

Data evaluated by Turnstile is processed in accordance with Cloudflare's privacy practices. You can learn more by reading Cloudflare's Turnstile Privacy Addendum.

7. Your Rights

Want a link deleted? Just ask. You can also clear your browser cookies anytime to remove any session data stored locally.

8. Policy Updates

We may tweak this policy from time to time. Changes take effect as soon as they're posted here, so check back if you want to stay current.

9. Contact

Questions or concerns about this Privacy Policy? Contact Exito Technologies at exito.lk or via our contact page.