unshortened

Privacy Policy

Last updated: August 2, 2026

1. Overview

Unshortened ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights. We do not sell your data. We do not track you across the web. We cache scan results to improve performance — that's it.

2. Information We Collect

2.1 URLs You Submit

When you paste a URL into the scanner or call the API, we receive that URL. We follow redirects (up to 5 hops) to determine the final destination. The URL and its redirect chain are temporarily processed for threat scanning.

2.2 Scan Results

We cache scan results (final URL, threat verdict, redirect chain) for up to 24 hours to serve repeat requests instantly. Cached results are not linked to your identity, IP address, or any persistent identifier.

2.3 Technical Data

Our server logs standard HTTP request metadata (timestamp, IP address, user agent, requested path, response status) for security, abuse prevention, and operational monitoring. These logs are retained for up to 30 days and then automatically purged.

2.4 API Keys (Optional)

If you register for an API key, we store the key hash (bcrypt), a label you provide, and usage counters. We do not store the plaintext key. You can revoke keys at any time from the dashboard.

3. How We Use Your Information

  • Threat scanning: Submitted URLs are checked against Google Web Risk for malware, phishing, and unwanted software.
  • Caching: Results are cached for 24 hours to reduce latency and API quota consumption.
  • Abuse prevention: IP addresses and request patterns are monitored to enforce rate limits and detect automated abuse.
  • Service improvement: Aggregated, anonymized statistics (e.g., threat detection rates, popular shorteners) may be used to improve the Service.

4. Information Sharing

We do not sell, rent, or trade your data. We share information only in these limited circumstances:

  • Google Web Risk: Submitted URLs are sent to Google's Web Risk API for threat classification. Google's use of this data is governed by Google's Privacy Policy.
  • Legal obligations: We may disclose data if required by law, court order, or to protect our rights and safety.
  • Service providers: We use third-party infrastructure (hosting, CDN, database) that processes data on our behalf under strict data processing agreements.

5. Data Retention

  • Scan cache: 24 hours (automatic expiry).
  • Server logs: 30 days (automatic purge).
  • API key metadata: Until you delete the key.
  • Account data (dashboard): Until you request deletion.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal obligations).
  • Object to or restrict processing.
  • Data portability.

To exercise these rights, email privacy@unshortened.com. We respond within 30 days.

7. Cookies & Local Storage

We use no tracking cookies, no analytics cookies, and no third-party advertising cookies. The only client-side storage is:

  • localStorage.theme — your theme preference (light/dark), stored locally in your browser.
  • localStorage.apiKey — your API key for the dashboard (if you choose to save it), never sent to us except in authenticated requests you initiate.

You can clear these at any time via your browser settings.

8. Security

We implement reasonable technical and organizational measures: HTTPS everywhere, strict CSP headers, rate limiting, IP-based abuse detection, and bcrypt-hashed API keys. However, no internet transmission or storage is 100% secure.

9. Children's Privacy

The Service is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy. Changes will be posted on this page with a revised "Last updated" date. Material changes will be announced via the dashboard or website banner.

11. Contact

Privacy questions or requests? Email privacy@unshortened.com.