Privacy Policy

Last updated: 2026-07-08

This Privacy Policy explains what data GoZST Links ("we", "us") collects when you use our short-link service, why we collect it, and the choices you have. We are the data controller for the processing described here.

1) Data we collect

  • Links you create: the destination URL, chosen options (expiry, one-time, password hash), and the generated slug.
  • Technical data: a one-way hashed IP address and browser user-agent, used for rate limiting and abuse prevention. We do not store raw IP addresses for public link creation.
  • Abuse reports: the reported slug, an optional reason, and a hashed IP of the reporter.
  • Purchases (if you buy a Pro plan): your email address, the amount, currency, and a payment reference from our payment processor.
  • Cookies & local storage: see our Cookie Policy.

2) How we use your data

  • To operate the short-link service and deliver the features you request.
  • To prevent abuse, spam, malware, and fraud (legitimate interest).
  • To process payments and deliver license keys by email (contract performance).
  • To comply with legal obligations and respond to lawful requests.

3) Third-party processors

We rely on trusted third parties who process data on our behalf:

  • Payment processors (Stripe, PayPal) — to handle payments. They receive your email and payment details under their own privacy policies.
  • Hosting & CDN providers — to serve the website.
  • Advertising (only if enabled in the future) — ad partners may set cookies subject to your consent. We will request consent before any non-essential/advertising cookies are set.

4) Data retention

Links are kept until they expire or are deleted. Abuse reports and technical logs are kept only as long as needed for security. Purchase records are kept as required for accounting and legal purposes.

5) Your rights

Depending on your location (e.g., under the GDPR/UK GDPR), you may have the right to access, correct, delete, or restrict processing of your personal data, and to object or request portability. To exercise these rights, contact us using the details below.

6) International transfers

Your data may be processed in countries outside your own. Where required, we rely on appropriate safeguards for such transfers.

7) Children

The service is not directed to children under 16, and we do not knowingly collect their personal data.

8) Changes

We may update this policy from time to time. The "Last updated" date reflects the latest revision.

9) Contact

For privacy questions or to exercise your rights, please contact us or email no-reply@gozst.com.