Privacy Policy

This policy explains how Shorten Magic (the "Service") processes the personal data of its users and of visitors who click short links, Shorten Magic is operated from the United States. This policy is written to meet the California Consumer Privacy Act (CCPA/CPRA), other U.S. state privacy laws and, for visitors in the European Union, the General Data Protection Regulation (GDPR).

1. Data we collect

• Account data: your email address and a one-way hash of your password. We never store your password itself.
• Payment data: your invoices, the amounts paid and the transaction details needed to confirm your payment. We don't receive or store card or bank details.
• API keys: we store only a hash of each key and its first characters so you can recognize it.
• Contact data: the email address and message you send when you email us.
• Link data: the short links you create, their destinations, tags and titles.
• Public links: links in our public directory may be shown on our home page and in our sitemap. Links you create with your account are not listed there.
• Click data: truncated IP address, approximate location (country/city), device type, operating system, browser, referrer and time.

2. How we use data

• To provide the Service, redirect links and build stats reports,
• To keep accounts secure and prevent abuse,
• To handle billing and meet legal obligations,
• With your consent, to send you product updates.

3. Sharing data

We don't sell personal data. We share it only with providers of hosting and email infrastructure and with the providers we use to confirm payments, under contractual confidentiality obligations and only as far as the Service requires. We may share it with authorities when legally required.

4. Retention

Account data is kept while your account is open. Payment records are kept as long as required for accounting and legal purposes. Click data is kept for your plan's retention period, then anonymized or deleted.

5. Cookies

We use essential cookies to keep you logged in and to remember preferences such as your theme. Visitors who click short links don't get tracking cookies; retargeting pixels run only on links where the link owner has turned them on.

6. Your rights

You have the right to access, correct, export or delete your personal data and to object to its processing. California residents also have the right to know what personal information we collect and to opt out of its sale or sharing; we do not sell personal information. We won't treat you differently for using these rights. Send requests to [email protected].

7. International transfers

Our servers are located in the United States. If you use the Service from outside the U.S., your data is transferred to and processed in the U.S. under appropriate safeguards such as Standard Contractual Clauses.

8. Children

The Service is not directed to children under 13, and we don't knowingly collect their personal information.

9. Changes

When we make a significant change to this policy, we'll notify you at your registered email address.