Privacy Policy

At Easy URL Shortener (accessible via easyurlshortener.com and our dedicated redirection service eziurl.com), your privacy is one of our fundamental operating principles. We believe that sharing links across the web should be clean, rapid, and respectful of personal data.

This Privacy Policy explains in straightforward, human-readable language what information we collect when you use our website, tools, APIs, and short links, as well as the data we deliberately choose not to collect.

1. Architecture & Background

Easy URL Shortener operates under a strict two-domain separation to preserve speed and user isolation:

• Main Web Portal (easyurlshortener.com): Houses our web interface, user dashboard, link shortening utilities, QR code customizer, and educational documentation. Unobtrusive display advertising (Google AdSense) may appear strictly on this domain to keep the platform free.
• Redirection Domain (eziurl.com): An ultra-fast, serverless edge redirection gateway. It serves zero HTML, zero CSS, and zero client-side JavaScript. When a user clicks an eziurl.com short link, the server executes an instant HTTP 302 redirect directly to the intended destination.

2. Information We Collect

We only collect data strictly required to deliver, secure, and improve our services:

A. Information You Voluntarily Provide

• Original Destination URLs: The web addresses you submit to be shortened.
• Custom Slugs & Aliases: Any personalized aliases you select (e.g., eziurl.com/my-event).
• Link Security & Control Rules: Optional settings you apply to your short links, including passcodes for password-protected links, scheduled link expiration timestamps, and click limits.
• Campaign & Workspace Tags: Custom campaign labels you create to organize your URLs in your dashboard.

B. Account Information (Google OAuth)

We offer optional account registration powered securely by Google Identity Services (OAuth 2.0). When you sign in with Google, we receive only basic profile information:

• Your verified email address (used to associate your saved links with your account).
• Your display name (used to personalize your dashboard interface).
• Your public profile photo URL (used to display your avatar).

Note: We never ask for, receive, or store your Google password. Authentication is handled entirely through Google's secure authentication servers.

C. Click & Traffic Analytics (When a Short Link is Visited)

To provide link creators with high-level performance insights, we log aggregate click events when an eziurl.com link is accessed:

• Country: The high-level country of origin provided automatically by Cloudflare's edge network via the standard cf-ipcountry HTTP header (e.g., United States, Germany, Japan).
• Device Category: Whether the click came from a Desktop, Mobile, or Tablet device, determined by reading the standard HTTP User-Agent header.
• Referrer Source: The originating website or platform that referred the visitor, derived from the standard HTTP Referer header (e.g., twitter.com, linkedin.com, or Direct if accessed without a referrer).
• Timestamp: The date and time the redirection occurred.

3. What Information We DO NOT Collect

We pride ourselves on our data minimalism. The following practices are explicitly prohibited on our systems:

• No IP Address Storage: We do NOT write individual visitor IP addresses to our database. Redirection counts are completely decoupled from individual user identities.
• No Precise Location or GPS Data: We never collect GPS coordinates, latitude/longitude, or street addresses. Our analytics only identify the broad country code provided by the Cloudflare edge network.
• No Device Fingerprinting: We do NOT employ canvas fingerprinting, WebGL probes, battery status monitoring, audio context hashing, or font enumeration to track users across the internet.
• No Interstitial Tracking or Code Injection: We do NOT redirect visitors through ad-laden intermediate countdown screens, nor do we inject tracking pixels or iframes into your destination sites.
• No Financial Information: All core URL shortening, analytics, QR code generation, and campaign features are free. We do not collect credit cards, bank accounts, or billing records.
• No Selling or Renting of Data: We do not monetize user data. We do not provide user lists or link telemetry to third-party data brokers or marketing coalitions.

4. How We Use Your Information

The information collected is used exclusively for the following purposes:

• Generating and managing shortened URLs and customized QR codes.
• Executing ultra-fast edge redirects to destination URLs.
• Populating the analytics dashboard for link creators (total clicks, country breakdowns, device types, top referrers).
• Enforcing link safety features, such as passcodes, expiration dates, and click quotas.
• Authenticating registered users and preventing unauthorized modifications to user links.
• Detecting and mitigating platform abuse, spam attacks, phishing attempts, and distributed denial-of-service (DDoS) threats.

5. Cookies & Local Storage

We use secure, minimal first-party cookies solely to maintain your login session and verify requests:

• session_user_email, session_user_name, session_user_picture: Essential session cookies used exclusively to keep you authenticated in your dashboard.
• google_oauth_state: A temporary 10-minute anti-CSRF security token used only during the Google Sign-In handshake.

No Cookies on Redirection: Visitors clicking an eziurl.com short link receive zero cookies from our redirect domain.

To learn more about how cookies operate and how to manage them, please review our comprehensive Cookie Policy.

6. Third-Party Infrastructure

We partner with industry-leading cloud providers to host and secure our infrastructure:

• Cloudflare (Pages, Workers, and D1 Database): Provides edge routing, DDoS mitigation, SSL encryption, and low-latency database storage. Data processed through Cloudflare is subject to Cloudflare's Privacy Policy.
• Google LLC (Google Identity Services): Provides secure OAuth authentication for users who sign in. Handled in accordance with Google's Privacy Policy.
• Google AdSense: Serves non-intrusive display advertisements exclusively on the main portal (easyurlshortener.com) to maintain our free service. Google and its ad partners may use standard web cookies to serve relevant ads.

7. Data Retention & User Deletion

You remain in full control of your created content:

• Link Deletion: You can delete any shortened URL at any time directly through your dashboard. Deleting a link immediately terminates its redirection and permanently removes all associated click logs from our database.
• Campaigns: You can edit or delete campaign groupings at any time.
• Account Deletion: If you wish to delete your entire account and all associated URLs, email us at hello@easyurlshortener.com and we will purge your records within 30 days.

8. Your Rights (GDPR, CCPA & Global Standards)

Depending on your location, you have rights regarding your personal information, including:

• The right to know what personal data we hold about you.
• The right to request the rectification of incorrect or outdated data.
• The right to request the erasure of your personal information ("Right to be Forgotten").
• The right to object to or restrict certain processing activities.
• The right not to receive discriminatory treatment for exercising your privacy rights.

9. Security Measures

We enforce state-of-the-art security safeguards to protect your information:

• All traffic across both easyurlshortener.com and eziurl.com is encrypted in transit using industry-standard HTTPS / TLS.
• Session cookies are configured with HttpOnly, SameSite=Lax, and Secure flags to prevent cross-site scripting (XSS) and cross-site request forgery (CSRF) exploits.
• Our cloud edge infrastructure is protected by automated rate limiting and enterprise-grade Cloudflare firewalls.