Privacy Policy

1. What we collect

When you use tapurl.io, we collect the following data:

• Account data — email address and password hash when you register.
• Link data — the original URLs you shorten and the short codes we generate.
• Click data — IP address, User-Agent, referrer, country (via GeoIP), device type, OS, and timestamp for each redirect. If you pass SubID parameters (sub1–sub8), those are stored too.
• Conversion data — payout and status received via postback from affiliate networks.

2. How we use your data

We use collected data exclusively to provide the service: redirecting clicks, showing analytics, and detecting abuse. We do not sell your data to third parties and do not use it for advertising.

3. Cookies

We use a single HttpOnly cookie (access_token) to keep you logged in. Analytics cookies (Google Analytics) are set only after you consent via the banner. No advertising cookies are set.

4. Data retention

Account data is retained for as long as your account exists. Click and conversion data is retained for the lifetime of the associated link. Guest links (created without an account) expire after 24 hours; their click data is deleted within 7 days.

5. Third-party services

We use MaxMind GeoLite2 for country detection — IP addresses are looked up locally and never sent to MaxMind. For anonymous visit statistics we use Google Analytics 4 — it loads only after you consent to cookies, and IP addresses are anonymized.

6. Your rights

You can delete your account and all associated data at any time by contacting us at the address below. We will process deletion requests within 30 days.

7. Contact

For privacy-related questions, write to us via the contact page.