Privacy policy
Updated September 21, 2026
1shorturl is operated by 1ManMission.
We process account and link data to operate 1shorturl.
Data we process
- Account email, password hash, preferences, and the most recent signed-in activity timestamp, visible to administrators for account support and service management.
- Destination URLs, short codes, titles, expiration settings, and click counts.
- Click timestamps, country, browser, operating system, device category, bot classification, referring website hostname, and whether a visit used a QR-marked link, a regular link, or has no recorded entry source.
- Session tokens and password-reset tokens are stored as hashes. Rate limiting uses hashed request identifiers.
Public link sharing
Links are unlisted by default. If you make a link public, its destination, title and aggregate activity recorded while public may appear in the community feed and Premium domain reports. Private-period clicks and imported historical clicks are excluded. Making a link private removes it from future shared reports; previously downloaded reports cannot be recalled. Anyone with an exact short URL can still follow it.
QR codes, campaigns and public stories
New QR images include a marker in the short URL so visits can be grouped by entry source. This does not establish a visitor's identity or count scans that never open a link. Public story links have separate aggregate reporting. Campaign labels become part of the destination URL and are sent to that website when opened; its privacy practices apply there.
Support
The support form prepares an email draft in your browser. It is not submitted until you send it through your email provider. Information you send, including your email address, message and attachments, is used to handle your request. Avoid sending passwords, API keys or reset links.
Your choices
You can delete links and update account details from your dashboard. For account deletion or privacy questions, contact privacy@1shorturl.com.
Cookies and storage
We use an essential session cookie to keep you signed in. Your selected display language is saved in your browser. The installed app caches its icons and an offline message; it does not cache account pages or link redirects.
Service providers
Hosting and email providers process information needed to operate the service. Requests may be recorded in infrastructure logs for reliability and abuse prevention.
Bot protection
We use Cloudflare Turnstile when you create links to help detect automated abuse. Cloudflare processes browser and network signals for this check. Learn more in Cloudflare's privacy policy.
Security
We use reasonable safeguards; no method is 100% secure.
Aggregate site usage
We count views of selected product pages and selected copy and QR actions in daily totals to understand how the service is used. These counters do not store visitor identifiers, IP addresses, emails, destination URLs or query strings. Reloads and repeat actions count again. Browser Do Not Track and Global Privacy Control signals disable this collection. Administrator activity is excluded. Aggregate reports may be shared with prospective advertising partners; they do not identify individual visitors.