Privacy Policy
Last updated: August 14, 2026
Introduction
Link Shrink ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening service.
We provide consent controls and data-handling information designed to support applicable privacy obligations, including GDPR requirements where they apply. Your use of the service remains subject to this policy and any rights available under applicable law.
Information We Collect
Account Information
- Email address (required for account creation)
- First and last name (optional)
- Profile picture (from authentication provider)
- Account identifiers, subscription status, plan, and product lifecycle milestones used to manage and support your account
URL Data
- Original URLs you shorten
- Custom aliases you create
- Password protection settings (hashed, never stored in plain text)
- Expiration dates for links
Analytics Data (for Pro and Premium users)
- Click counts and timestamps
- IP addresses and derived geographic location (country, city)
- Device type, browser, and operating system
- Referrer URLs
IP addresses may be stored with click records and are retained according to the Data Retention section below.
Payment Information
Payment processing is handled by Stripe. We do not store your credit card details. We only receive confirmation of successful payments and subscription status from Stripe.
Consented Site and Product Analytics
After you enable Analytics, GA4 measures templated SPA pageviews and selected core events, while PostHog measures product behavior and feature adoption. We send coarse feature, mode, provider-category, authentication-state, and templated route properties. GA4 and PostHog also receive anonymous client/device/session identifiers and limited browser, operating-system, device, screen, viewport, language, timezone, SDK, and IP-derived geographic metadata as applicable to each provider. We do not send destination URLs, query strings, short codes, domain names, passwords, user pixel IDs, or Link Shrink account identifiers.
How We Use Your Information
- To provide and maintain our URL shortening service
- To process your subscription and manage your account
- To manage account onboarding and lifecycle communications
- To provide analytics and insights about your shortened links
- To send important service-related notifications
- To detect and prevent fraud and abuse
- To improve our services and develop new features
- To respond to your inquiries and support requests
Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide our services
- Legitimate Interests: For fraud prevention, security, and service improvement
- Consent: For optional marketing communications and non-essential cookies
- Legal Obligation: When required by law
Your Rights Under GDPR
As a user in the European Union, you have the following rights:
Right to Access
Request a copy of your personal data we hold
Right to Portability
Export your data in a machine-readable format
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Request deletion of your personal data
Right to Restrict Processing
Limit how we use your data
Right to Object
Object to processing based on legitimate interests
To exercise these rights, visit your Profile Settings or contact us at support@linkshrink.pro
Data Retention
- Account data is generally retained while your account remains active or as needed to provide the service
- Shortened URLs and related analytics remain available until removed through the product or account lifecycle, subject to operational and legal requirements
- Payment records are retained where required for accounting, tax, fraud-prevention, or other legal obligations
- Deleted data may remain temporarily in backups until those backups age out under the applicable backup schedule
Data Security
We implement appropriate technical and organizational measures to protect your data:
- HTTPS/TLS is used for normal web traffic to the service
- Authentication and access controls protect restricted application areas
- Secrets and credentials are not intentionally included in client analytics events
- Hosting and service providers may process data in different regions as described in their terms and transfer safeguards
Third-Party Services
We use the following third-party services that may process your data:
- Stripe: Payment processing (PCI DSS compliant)
- Replit: Hosting infrastructure
- Cloudflare: CDN and security services
- Google AdSense: Optional advertising after Marketing consent
- Google Analytics 4: Optional consented site and conversion analytics
- PostHog: Optional consented product analytics, using EU ingestion by default
- HighLevel (GoHighLevel): Customer relationship management, account lifecycle, and service communications. We share the account ID, email, name, signup and activity dates, link-count and activation milestones, plan, and subscription status needed for those purposes.
Each provider processes data under its own terms and privacy documentation. Our optional client analytics are gated by consent and configured with the minimization controls described here.
HighLevel processes limited account information on our behalf, such as your email address, optional name, account identifier, subscription state, and product lifecycle milestones. We use this data to operate, support, and communicate about your account. We do not treat cookie or tracking-pixel preferences as consent to promotional email; optional marketing communications require a separate, explicit choice and can be withdrawn.
Tracking Pixels and Marketing Measurements
When you visit a shortened link that has tracking pixels attached by the link owner, we may load measurement and remarketing pixels from the following providers:
- Meta Pixel
- Google Analytics 4 (GA4)
- Google Ads
- TikTok Pixel
- Pinterest Tag
These pixels are used solely for measurement and remarketing purposes as directed by the link owner. They may set or read cookies or similar identifiers on your device and share inferred information (such as device type, browser, approximate location, and pages viewed) with the respective providers.
Marketing consent: Pixels only execute after you explicitly accept marketing cookies via our interstitial or cookie preferences. You can withdraw consent at any time using the "Manage Cookie Preferences" button on our site or by resetting your cookie preferences.
Global Privacy Control (GPC) / Do Not Track: If your browser sends a GPC signal or has DNT enabled, we disable optional SPA analytics and do not load marketing pixels on your visit.
Data transfers: The providers listed above may process data outside the European Economic Area under their own privacy terms and transfer safeguards. Visitors and link owners should review the applicable provider privacy policies for details.
Preference storage: Your consent choice is stored in browser storage for the redirect origin. It can apply to other links served from that same origin, but it is not shared with a different short or custom domain. Preferences can be changed at/_linkshrink/privacy-preferences on the relevant redirect origin or by clearing that site's browser data.
Internal analytics: In addition to third-party pixels, we collect server-side click analytics (e.g., click counts, timestamps, device info, referrers) for the link owner's internal use. This internal analytics is separate from the Marketing preference and does not load the third-party pixel scripts listed above.
Cookies
We use cookies and similar technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
GA4 and PostHog do not initialize until explicit Analytics consent. Analytics and Marketing are separate choices. You may change your choice at any time; revocation prevents future client analytics capture. We set GA's supported disable flag, attempt to remove accessible GA cookies for this site, and reset/opt out PostHog. Revocation does not erase data already received by a provider; deletion requests are handled under the applicable privacy process.
Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, contact us:
- Email: support@linkshrink.pro
- Contact Form: Contact Page
You also have the right to lodge a complaint with a supervisory authority in your country.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will send you an email notification.