Draft for legal review. This is a factual description of what the software collects, prepared to help write the policy. It isn't legal advice and doesn't claim compliance with the Australian Privacy Principles or any other law.
Privacy policy
Account holders
- Email address, display name, password hash, sign-in times, and a coarse network prefix and browser for each session.
- Links, QR codes, tags and campaign details you create, and an audit log of changes.
- If you turn on two-factor authentication: an encrypted authenticator secret and hashed recovery codes.
- If you sign in with Google, Apple or single sign-on: that provider's account identifier and the email address it shares.
- Team invitations: the invited email address, role and who sent it.
People who report a link
- The reported link, the reason and details given, an optional email address, and a coarse network prefix (used to limit repeated reports).
People who open short links
- Time, link, referring site, browser and operating system family, device type, UTM parameters, and country when our network provider supplies it.
- A one-way daily visitor hash used only to estimate unique visitors. Full IP addresses are not stored.
Retention (current defaults)
- Daily visitor salts: deleted after 2 days. Per-day visitor hashes: 3 days.
- Click history shown in reports depends on the plan (30 days on Free). Individual click records are deleted after 90 days; daily totals are kept.
To be completed by counsel
- Purposes and legal bases, disclosures and overseas recipients, access and correction requests, complaints, and contact details.