Privacy policy

Last updated: 6 October 2026.

Two kinds of people

  • Customers create an account and links. We store your name, email address, a hashed password, your workspace settings and your billing status. Payments are handled by Stripe; we never see or store card numbers.
  • Visitors click a short link. They do not have an account with us. This section matters most, because visitors never chose to use our service.

For each click we record the time, the link, and coarse details derived from the request:

  • country (from the network, not GPS);
  • device type, operating system and browser (from the user agent);
  • the referring website's domain, if the browser sends one.

We do not store IP addresses. To count unique visitors, we compute a one-way hash of the network address and browser together with a secret salt and the current date, and keep only a short prefix of that hash. The same visitor produces a different hash on different days, so visitors cannot be followed from one day to the next.

We do not set cookies on short links and we do not sell data.

How long we keep it

Click analytics are kept for the retention period of the link owner's plan: 30 days on Free, 1 year on Pro, 3 years on Team and 5 years on Scale. After that they are deleted. Account data is kept while your account is open and deleted within 30 days of closing it, except where we must keep billing records by law.

Where it is processed

The service runs on Cloudflare's global network. Data is stored by Cloudflare on our behalf.

Safety scanning

Destination URLs are checked against malware and phishing lists when links are created. Abuse reports you send us are kept to investigate and act on them.

Your rights

You can export or delete your links and analytics from the dashboard, and ask us to delete your account. Visitors can ask the link owner, or us, about click data; because we keep no IP address or identifier, we usually cannot link a click to a person.

Contact

Questions about privacy: contact FunnelKit support.