Privacy Policy

EthericLink collects minimal data to provide our URL shortening service:

• Account data: When you sign in via GitHub or Google, we receive your name, email address, and profile photo from the OAuth provider. We do not receive or store your password.
• Link data: The original URLs you shorten and the generated short codes.
• Analytics data: For each click on a shortened link, we collect a hashed (SHA-256) version of the visitor's IP address, device type, browser user-agent, referring URL, and timestamp. We never store raw IP addresses.
• Guest usage: Guest links are created without an account. We track only the IP hash for rate limiting purposes. Guest link data is automatically deleted after expiration (1 hour).

• To provide and maintain the URL shortening service
• To display click analytics on your dashboard
• To enforce rate limits and prevent abuse
• To improve the performance and reliability of our service

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Your data is stored securely in Supabase (PostgreSQL) with row-level security policies. Cached data is stored in Upstash Redis with automatic expiration.

• Guest links: Automatically purged after 1 hour
• Authenticated links: Retained for up to 365 days or until you delete them
• Click analytics: Retained as long as the associated link exists
• Account data: Retained until you request account deletion

We use the following third-party services:

• Supabase: Database hosting and authentication adapter
• Upstash: Redis caching and rate limiting
• GitHub / Google: OAuth authentication providers
• Vercel: Frontend hosting

Each provider operates under their own privacy policy. We encourage you to review them.

We use a session cookie (connect.sid) to maintain your authentication state. This cookie is HTTP-only, secure in production, and expires after 7 days. We do not use tracking cookies or third-party advertising cookies.

You have the right to:

• Access your personal data via your dashboard
• Delete your links and associated analytics at any time
• Request full account deletion by contacting us
• Export your link data

For privacy-related questions, contact us at karasbuilder@gmail.com