Urlsify collects as little as it can get away with. This page says exactly what that is, why it exists, and what it is never used for — in plain terms, not legal padding.
Last updated 9 September 2026
The link shortener on the home page needs no account, no email and no sign-up. You can shorten links forever without telling us who you are. Nothing on this page changes that, and nothing here applies to you unless you deliberately create an account.
An account exists to unlock bulk link creation and a saved library. It stores only:
| Data | Why it exists |
|---|---|
| Email address | It is your login, and the only way to reach you if you open a support case or ask for a password reset. |
| Password | Stored only as a salted hash by our authentication provider. Nobody at Urlsify can read it, including us. |
| Your links | The short code, destination, campaign tag, expiry and click count — so your library survives across devices. |
| Account creation date | Shown to you in Settings, and used to resolve support cases about account age. |
Your email is used strictly for account coordination. That means: signing you in, resetting your password, and replying to you if you open a support case. Nothing else. If you never contact support, we will never contact you.
We do not sell, rent, share or trade your information. There are no marketing emails, no newsletters, no advertising profiles, no data brokers, no analytics vendors receiving your identity, and no third parties given access to your account details for any purpose.
Your email is never attached to the public click analytics. It is never used to build a profile of you, and it is never handed to the partner sites linked from the home page — those are ordinary outbound links and receive nothing about you from us.
Every short link — with or without an account — counts clicks and records a coarse breakdown of country, referrer, browser and device. This is aggregate counting only: totals per category, never a log of individual visitors. We do not store the IP addresses of people who click your links, do not set tracking cookies on them, and cannot tell you who clicked, only how many did and roughly from where.
Accounts and the link library are held by Supabase (authentication and database). Links and their click counts live in Cloudflare KV storage at the edge. Both are infrastructure providers processing data on our behalf — neither is given permission to use it for their own purposes.
Database access is protected by row level security, meaning the database itself enforces that you can only ever read or modify your own rows. Link management is gated behind a signed token check that verifies you own a link before it can be edited or deleted.
Links expire on the schedule you pick — from one hour to two years — and are removed automatically when they do, along with their analytics. Account data persists until you delete your account.
Settings → Delete account, in your dashboard. Deleting removes every link you created while signed in, and those short links stop resolving immediately. You will be offered a checkbox to also erase all stored information from our servers — tick it and your email, password hash and account record are destroyed too, not just your links. Deletion is immediate and irreversible; we keep no backup copy of a deleted account for our own use.
If this policy changes in a way that affects what we collect or how it is used, the date at the top of this page changes with it. We will not quietly broaden what your data is used for.
Questions about your data, or want it removed manually? Use the suggestion box on the home page, or reach the operator through the contact details listed there. Support requests are answered using the email on your account and nothing else.