Privacy Policy
Last updated: 2026-09-29
Our principle is simple: we store only what the service needs to work, and we do not track you for advertising.
What we store
- Account details: the email address and user id we receive from Google sign-in.
- Your links: the destination address, short code, domain, creation and update timestamps, and the destination edit history.
- Click data: aggregate counters only (total clicks, how many were identified as bots, and a daily summary). We do not keep a profile of an individual visitor: no clicker IP addresses, no identities.
- Organization: the tag names and workspace name you chose.
- API keys: stored as cryptographic hashes, so we cannot recover a key after it is created.
- Abuse reports: the report text, the reporter's email if provided, and a hashed identifier of the reporter's IP address. Raw IP addresses are never stored.
- Rate-limit guards: request counters kept under hashed identifiers. Again, no raw IP addresses.
Where the data lives
Data is stored on Google Cloud in the European Union: the Firestore database in region eur3 and the servers in europe-west1. DNS is managed through Cloudflare.
Usage measurement
To learn which pages help and where people get stuck, we measure usage of the site and the app with PostHog, on servers in the European Union (Frankfurt), in cookieless mode: your browser stores no identifier at all; instead PostHog computes, on its servers, a daily hash from your IP address, browser details and our domain together with a secret random value that changes every day and is then deleted - so the original data cannot be recovered from it. The IP itself is dropped before the event is stored, and the hash changes every day, so no profile builds up over time.
What is recorded: the page viewed and its title, where you came from (referrer), browser and device details (type and version, operating system, browser language, time zone and screen size), how long you stayed on a page and how far you scrolled, clicks on the buttons that lead into the app, and in the app also page performance metrics and a few generic product actions (for example that a link was created or a QR code downloaded) - never the content of your links, never the search terms you type, and never your identity. No session recording, nothing shared with advertising networks. A browser that sends the Global Privacy Control signal is not measured at all.
What we do not do
- We do not sell or rent data to anyone.
- We do not embed advertising pixels or build visitor profiles.
- We do not add interstitial pages or ads to your links.
Safety checks
Link destination addresses are checked against the Google Web Risk service (at creation, on every edit, and in a daily rescan during the first 30 days) to detect phishing and malware. Only the destination address is sent.
When a link is reported, or when the daily rescan disables one, we get a Telegram message with its short code. The report text, the reporter's email and the destination address are not sent there.
Deleting your account
Delete your account from inside the app, at any time. Deletion removes your account details and workspace. What does remain: short-link records (the short code, its destination address and edit history, together with the aggregate click counters) are kept as inactive tombstones - so a deleted address answers 410 and is never reassigned; API-key records are kept in a revoked state; and abuse reports filed against links are retained for enforcement purposes.
Contact
Privacy questions: support@ktzr.io