Retention
Purpose-limited retention and deletion behavior for this service version.
Last updated: 2026-07-17
Active links
An active link remains until its selected expiry, owner deletion, or a security, abuse, legal, or operational action. Users must keep their own copy of any destination or receipt they need.
Deleted links
Deletion immediately removes the destination, password hash, note, expiry, ownership association, management credentials, and linked API replay data. The short code and lifecycle timestamps remain as a non-reusable tombstone so the code cannot later point somewhere else.
Sessions, tokens, and limits
Sessions and verification, reset, unlock, API-idempotency, and rate-limit records have configured expiries or cleanup eligibility. API idempotency defaults to 24 hours and authentication-rate records become eligible for cleanup after one day. Expiry ends normal use of a record; operational deletion may occur later and may be delayed for security, disputes, or legal requirements.
Safety records
The URL-safety cache stores a URL hash, verdict, reason, and short-lived timestamps rather than the submitted URL. Security records are retained only while reasonably necessary to enforce controls, investigate abuse, or demonstrate service integrity.
Reports and audit evidence
Abuse reports and append-only moderation or security audit events are retained while reasonably necessary for investigation, repeat-abuse detection, dispute handling, legal compliance, and accountability. Access is restricted by role and these records are not used for advertising.
Redirect analytics
This service version does not maintain a user-facing click-statistics dataset. Any future analytics feature will require an updated privacy and retention notice before activation and will not change the no synchronous-write redirect contract.
Legal preservation
A deletion or expiry period may be suspended for a valid legal hold, security incident, fraud investigation, or legal claim. When the reason ends, the data returns to the applicable deletion process. Aggregated or irreversibly de-identified information may be retained where permitted by law.