Privacy Policy

1. Data we process

We limit collection to data needed to operate, secure, and understand basic use of the service.

• When a link is created: destination URL, alias, selected domain, creation time, expiration, status, and a one-way hash of the creator’s IP address.
• When a link is opened: visit time, referring hostname (not the full URL), device type, browser family, country code when supplied by the network, and a daily pseudonymous visitor identifier derived from IP address and user-agent.
• When a link is managed: the management token is hashed on the server; the original token is kept in the creating browser’s storage.
• When an abuse report is submitted: the reported link, reason, optional details, report time, and a one-way hash of the reporter’s IP address used to limit repeated reports.
• Temporary technical data such as sessions, CSRF tokens, cache entries, rate-limit records, and error logs may be processed for security and reliability.

2. Purposes and legal bases

We use data to create and redirect links, provide summary statistics, enable anonymous management, prevent abuse, troubleshoot failures, meet legal duties, and improve the service. Depending on applicable law, processing may rely on providing the service you request, legitimate security and operational interests, a legal obligation, or consent where required.

3. Public links and creator responsibility

Short links are designed to be opened by anyone who has them. Do not place personal or confidential information in an alias or destination URL unless it is appropriate for recipients, infrastructure providers, and anyone who lawfully gains access to see it.

4. Retention and deletion

Link data and related statistics are retained for as long as reasonably needed to provide the service, protect it, resolve disputes, and comply with law. A link may remain stored while active or until removed or disabled. Cache, sessions, logs, and backups may follow different deletion cycles. We delete or anonymize data when no longer needed where technically feasible and legally required.

5. Sharing

We do not sell personal data. Data may be shared only with hosting, database, cache, security, or network providers that help operate IeuLink; advisers or a service successor; or authorities when required by law or reasonably necessary to protect users and the service. Providers receive only what is needed for their role.

6. International transfers

Because IeuLink is globally available, infrastructure providers or users may be located in other countries. Where required, we use appropriate protections for cross-border transfers.

7. Your rights and choices

Subject to applicable law and reasonable verification, you may request information, access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent where processing depends on consent and complain to a competent authority. A request may be limited by law, security, others’ rights, or our inability to connect pseudonymous data to your identity.

8. Security, children, and third parties

We use reasonable safeguards including hashing, destination validation, rate limits, CSRF protection, and bounded caching, but no system is completely secure. IeuLink is not directed specifically at children who cannot legally consent under local law. Destination sites are independent third parties with their own policies and risks.

9. Changes

We may update this policy when features, data practices, providers, or laws change. The latest date appears here, and material changes will be communicated reasonably through the service.