Privacy Policy
Last Updated: October 2026 · Compliant with DPDP Act (India) & GDPR (EU)
1. Scope and Principles
ShortenFor.Me operates on the core principles of Data Minimization and Purpose Limitation. We only process personal data that is strictly necessary to deliver high-speed URL shortening, analytics, and abuse prevention services.
2. Data We Collect
- Account Data: When you register via Google, Microsoft, or Facebook (powered by Clerk), we receive your verified name, email address, and avatar. Passwords are never stored on our servers.
- Click Analytics & IP Anonymization: When short links are visited, visitor IP addresses are immediately hashed using daily cryptographic salts and masked (e.g.
192.168.1.xxx). Full raw IPs are never stored in our analytics tables. Geolocation (country and city) is derived at the Cloudflare edge without third-party API exposure.
3. Your Statutory Rights
Under India's Digital Personal Data Protection Act 2023 (DPDP) and the General Data Protection Regulation (GDPR), you have the right to:
- Right of Access & Portability: Download a full machine-readable JSON/CSV export of all your data directly in your Privacy Portal.
- Right to Erasure: Delete your account and associated links self-service with a 30-day grace period.
- Right to Grievance Redressal: Submit grievances directly to our statutory Grievance Officer via our Grievance Portal.