Privacy Policy

What this covers

This policy explains what MicroURL (“we”, “us”) collects when you use getmicrourl.com and any links shortened through it, and how that data is used. MicroURL is currently a pre-revenue, solo-run project. If anything here changes materially, we’ll update this page and note the date above.

What we collect

• Account data: your name and email address, handled by our authentication provider (Clerk). We never see or store your password.
• Link data: destination URLs, custom slugs, titles, and expiration dates you create.
• Click analytics: for each click on a shortened link, we log an approximate geographic location (country/region, derived from IP; we do not store raw IP addresses long-term), device type, browser, referrer, and timestamp. To count how many different people opened a link, we keep a one-way code made from the visitor’s IP address and browser with a random value that changes every day; we delete each day’s random value after a day, so the code can’t be traced back to an IP address.
• Destination URL safety checks: URLs you submit are checked against Google’s Web Risk API before a link is created, to screen out known malware/phishing destinations. The URL itself is sent to Google for this check.
• Site analytics: our own website uses Cloudflare Web Analytics to count page views. It sets no cookies and doesn’t fingerprint your device, and it isn’t loaded when someone clicks a short link.
• Where you came from: on your first visit, your browser keeps the campaign tag in the address (if any), the domain of the site that sent you, and the first page you saw, in its own local storage, plus which sign-up button you clicked. If you sign up, we save those things with your account so we know which pages, buttons and channels work. If you don’t sign up, nothing is sent to us.
• Details shared from a contact card: if a card’s owner turns on sharing, someone who opens the card can send the owner their name and a phone number or email (and a note). We store it for the card’s owner, who is the only one who can see it and who can delete it at any time; it’s also deleted with the card. We never use it for anything else. A spam check from Cloudflare (Turnstile) runs on that form.
• Team invites: if you invite a teammate, we send that invitation email via Resend.

What we don’t do

• We don’t sell your data or your link/click data to anyone.
• We don’t use device fingerprinting beyond standard browser/device/referrer parsing.
• We don’t share destination URLs or click analytics across organizations. Every link belongs to exactly one workspace.

Where data lives

All application data (accounts, links, analytics) is stored on Cloudflare’s infrastructure (D1 and KV). Authentication is handled by Clerk. Team-invite emails are sent via Resend. Malicious-URL screening calls Google’s Web Risk API. Website page views are counted by Cloudflare Web Analytics.

Data retention

Click analytics are retained according to your plan’s analytics-retention window (see pricing). Deleting a link removes it from active redirects immediately; historical analytics for that link are retained until the normal retention window expires.

Your rights

You can access, export, or delete your account data at any time from the dashboard, or by emailing hello@getmicrourl.com. Deleting your account removes your links from active redirect and deletes your account data.

Contact

Questions about this policy? Email hello@getmicrourl.com.