Last updated: . This is a template — have a lawyer review it before launch.
What we collect
When you create an account: your email address (via our authentication provider, Firebase). When you create a short link: the destination URL, the slug you chose or were assigned, and an aggregate click counter. When someone visits a short link: we log the timestamp and IP address briefly for abuse prevention and rate limiting; we do not sell or share this data.
How we use it
To operate the redirect service, show you your own links and click counts, prevent abuse (rate limiting), and communicate essential account or service notices.
Cookies
We use essential cookies required for login sessions. With your consent, we may use optional analytics cookies to understand site usage — you can decline these in the cookie banner at any time.
Third parties
We use Firebase for authentication and Cloudflare for hosting and data storage. These providers process data on our behalf under their own privacy and security commitments.
Your rights
You can request a copy of your data or request deletion of your account and links by contacting us. We will respond within a reasonable timeframe.
Contact
Questions about this policy: privacy@srt.to (replace with your real contact address).