Privacy Policy

Updated at: 2026-06-21.

Privacy Policy

Last updated: June 2026

1. Introduction

Shorty KW.SALE ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our URL shortening and link management service (the "Service").

2. Data Controller

The data controller responsible for your personal information is the operator of Shorty KW.SALE. If you have any questions about this policy, please contact us.

3. Information We Collect

3.1 Information You Provide

  • Account Information: Name, email address, password, and timezone when you create an account.
  • Profile Information: Avatar image and preferred language.
  • Billing Information: Payment data, billing address, and VAT number (processed by our payment processors; we do not store full credit card numbers).
  • URL Data: The URLs you shorten, along with any titles, descriptions, or tags you associate with them.

3.2 Information Collected Automatically

  • Click Analytics: When a visitor clicks a shortened URL, we collect the IP address, timestamp, referrer URL, browser type and version, operating system, device type, language preference, and approximate geographic location (country and city via IP geolocation).
  • Usage Data: Pages visited, features used, and interactions with the Service.
  • Cookies: See our Cookie Policy for details.

4. How We Use Your Information

We use your information for the following purposes:

  • To provide, maintain, and improve the Service
  • To process your account registration and manage your subscription
  • To deliver link analytics and statistics to you
  • To detect, prevent, and address abuse, fraud, and security threats
  • To comply with legal obligations
  • To communicate with you about your account, updates, and support requests
  • To enforce our Terms of Service

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal data is:

  • Contractual Necessity: Processing necessary to provide the Service under our Terms of Service.
  • Legitimate Interests: Analytics, security, abuse prevention, and service improvement.
  • Consent: Where required, we obtain your consent for cookies and marketing communications.
  • Legal Obligation: Compliance with applicable laws.

6. Data Sharing & Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Payment processors (e.g., Stripe, PayPal), cloud hosting providers, email delivery services, and analytics tools — all bound by data processing agreements.
  • Legal Authorities: When required by law, court order, or valid legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Analytics data for shortened links is retained for the duration of your account. Upon account deletion, we delete or anonymize your personal data within 90 days, except where retention is required by law (e.g., billing records retained for 7 years).

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Restriction: Restrict processing of your data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us through our contact page. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/HTTPS), encrypted storage, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for international transfers.

11. Childrens Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will notify registered users of material changes via email.

13. Contact

If you have questions or concerns about this Privacy Policy or wish to exercise your data protection rights, please contact us.