Privacy Policy

We process only the data described below.

• Original (destination) URLs you submit for shortening.
• Shortened URLs and any custom alias you choose.
• IP-derived security data: we store a one-way hashed fingerprint of the creator's IP address, not the raw IP, for rate limiting and abuse prevention.
• A random session identifier generated in your browser when you create a link.
• Click events on short links, including the time of each click.
• Referral source (the referring website, where the browser sends it).
• Browser/device information in the form of the user-agent string sent with a click.
• Email addresses you voluntarily submit to unlock link analytics or to join our newsletter, together with the source of that submission and the related short code.
• Abuse reports you submit, including the reported short code, the reason, your description and an optional contact email.

We do not require an account, we do not ask for names, addresses or payment details, and we do not use advertising or cross-site tracking cookies.

• To operate the service: store your destination URL and redirect visitors who open the short link.
• To provide analytics: show click counts, daily click trends and top referral sources for a short link.
• To protect the service and its users: screen destinations against malicious-URL checks and an internal blocklist, apply rate limits, and detect automated abuse.
• To respond to abuse reports and to suspend or block links that break our rules.
• To send you the Verra newsletter, if you asked for it.

Analytics are aggregate and link-level, not person-level. When a short link is opened we record a click row containing the timestamp, the referrer and the user-agent string. We do not build user profiles, do not attempt to identify individual visitors, and do not sell or share click data. Anyone with the short code can view that link's statistics after providing an email address, so do not use short links for confidential destinations.

Every submitted destination is validated and screened before a short link is created. We hash the creator's IP address and store that hash alongside a session identifier so we can enforce rate limits and record abuse events (for example, a blocked malicious URL or a blocklist hit). These records are used only for security, moderation and fraud prevention.

• Links and their click history are retained for as long as the short link remains active, so that the redirect and its analytics keep working.
• Suspended or blocked links are retained so the short code cannot be reused and so we have a record of the enforcement action.
• Abuse events and abuse reports are retained for moderation and security history.
• Email addresses are retained until you ask us to delete them or unsubscribe.

We rely on the following providers to run the service:

• Lovable — application hosting and delivery of the website and its server functions.
• Supabase — managed database hosting for links, click events, abuse records and email addresses.
• Cloudflare Turnstile — invisible bot challenge on the link-creation form.
• Google Safe Browsing — malicious-URL screening of submitted destinations.
• Google Fonts — web font delivery.

These providers process data on our behalf as part of delivering the service. We do not sell personal data.

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, to object to or restrict certain processing, and to withdraw consent for marketing email at any time. Contact us and we will act on your request. Because short links are created without an account, we may ask you for the short code or the email address involved so we can locate the right records.

Verra Links is not directed at children under 13, and we do not knowingly collect their data.

We may update this policy as the service changes. The "last updated" date above always reflects the current version.

Privacy questions and requests: info@smedigital.biz. To report a harmful short link, use our abuse report form.