Privacy Policy

1. Information We Collect

Nanolink has no user accounts and collects only what it needs to run short links and handle abuse reports:

• Link data: the destination URL you shorten, the short code (alias) you choose, the API key generated for the link, and when the link was created, last updated and expires.
• Abuse reports: the reported links, the reason and any details you provide, and, if you choose to give it, your email address. We also record the IP address the report was sent from, to limit the rate of reports and to prevent abuse of the report form. While we handle a report we add a case number, its status history and internal notes.
• Contact form messages: the topic, your name if you give it, your email address and your message. They are delivered to our team's mailbox and chat; the website itself does not store them.
• IP addresses for rate limiting: to protect the Service, requests to our API are limited per IP address. These limits are counted as requests arrive; apart from abuse reports, we do not store IP addresses.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our link shortening service: redirecting short links to their destination, and letting the holder of a link's API key change it.
• To investigate abuse reports and act on links that break our terms.
• If you leave an email address on a report: to send you the case number and status updates about that case. Every email contains an unsubscribe link, and you can stop these updates at any time.
• To answer the messages you send through the contact form. We use your email address only to reply.
• To detect, prevent, and address technical issues or potential abuse of our service.
• To comply with legal obligations.

3. People Who Follow a Short Link

Nanolink does not provide click analytics. When someone follows a short link, we look up its destination and redirect them. We do not record who followed a link, where they came from or what device they use, and we keep no per-link click statistics.

4. Storage in Your Browser

We do not use cookies or tracking scripts. The website keeps a few things in your own browser's storage, never sent to us unless you use them: the links you created there together with their API keys (so you can manage them later), and your light or dark theme choice. You can remove links from the homepage, or clear your browser's site data at any time.

5. Data Retention

We retain information as follows:

• Link data:
  • Free tier: links expire 30 days after creation and stop redirecting. The link record (destination, short code and API key) is kept after it expires.
  • Paid tier: links are retained until you ask us to delete them.
• Abuse reports: kept as a record of the case and how it was handled. If you unsubscribe, we record that and stop emailing you about the case.
• Contact form messages: kept in our team's mailbox and chat for as long as we need them to handle your request.
• Logs: we do not keep request logs. Errors are logged for troubleshooting, without the IP addresses of visitors.

You can ask us to delete your data at any time; see your rights.

6. Service Providers

We rely on a small number of providers who process data on our behalf, only to run the Service:

• Cloudflare hosts the website, the API, the redirects and the database.
• Resend delivers the emails we send to people who reported a link, and contact form messages to our team's mailbox.
• Lark carries notifications about new and updated reports to our team's chat, including the report details and the reporter's email address if one was given, and contact form messages.

7. Information Sharing and Disclosure

We do not sell, rent, or share personal information with third parties except with the service providers listed above and in the following circumstances:

• With your explicit consent.
• To comply with legal obligations, such as responding to lawful requests from public authorities.
• To protect our rights, privacy, safety, or property.
• In connection with a merger, acquisition, or sale of assets, with appropriate safeguards for your data.

8. Security Measures

We take reasonable measures to protect your data, including:

• The Service runs on Cloudflare's platform and benefits from its infrastructure security and DDoS protection.
• All traffic to the website and the API is encrypted with HTTPS.
• Abuse reports can only be read through our admin panel, which requires an admin key.
• Requests to the API are rate-limited per IP address to limit abuse.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data:

• Access and obtain a copy of your data.
• Rectify inaccurate or incomplete data.
• Request deletion of your data.
• Restrict or object to certain processing activities.
• Data portability.
• Withdraw consent (where processing is based on consent), for example by unsubscribing from case updates.

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

10. Changes to this Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. For significant changes, we will provide a more prominent notice on this website.

11. Third-Party Links and Services

Short links lead to websites that are not owned or controlled by Nanolink. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at: