Useful counts.
Less personal data.

We store your account’s hashed secret key, code labels, destinations, status, total scans, and daily scan counts. We do not store IP addresses, user agents, or cookies with scans. No analytics or third-party fonts or scripts are loaded.

Temporary abuse protection

For account creation and abuse reports, we use the request IP in memory to compute a daily-rotating salted SHA-256 hash. We store that temporary hash and a request count, never the raw IP. Hash records are retained for at most 48 hours of active use and purged opportunistically when rate-limited actions occur. On an idle service, expired rows may remain until the next such action; they are never used after expiry. Account edit rate limits use the account ID.

Your browser and reports

Your secret key is stored in localStorage on your device to keep you signed in. Sign out to remove it. Your URL fragment is read locally and removed from the address bar; it is not sent as a query string. Abuse reports store your reason and optional contact, so include only information necessary to investigate.

Payments and hosting

If Pro is enabled, license verification sends your license key to Gumroad. We store only its SHA-256 hash linked to your account. Cloudflare hosts this service and processes network requests under its own infrastructure policies. For privacy questions or deletion requests, contact glitchyprojects@gmail.com.