NO WEIRD SURPRISES.

Your business is your business.

What we store

Your account name, email, password hash, connected domains, short links, and destinations. We keep session records so you can stay signed in. We never store your password in plain text.

What a click tells us

We record the time, the referring hostname (not its path or query), a broad device category, a browser category, and whether the request looks like a bot. We do not store visitor IP addresses or raw user-agent strings in our analytics database. We don't set tracking cookies on redirects. Infrastructure logs may contain IP addresses for operations and security.

Cookies, the boring kind

The main application uses essential cookies for login sessions and protection against forged form submissions. No advertising or third-party analytics scripts are included.

Who can see what

Account holders see analytics only for links in their own workspace. Links are public to anyone with the URL, and destinations are visible through redirects. Don't shorten confidential URLs. Service operators can access stored data to run, secure, and support the service. We don't sell it.

How long it sticks around

Link and click data stays until its link, domain, or account is deleted. Expired sessions are removed automatically. Infrastructure backups may retain deleted information until those backups expire. Analytics reports show the most recent 30 days; all-time totals include older clicks.

Your choices

You can delete individual links or domains in the app. For account deletion, data access, or privacy questions, email spicer@cloudmanic.com from your account address. We may ask you to verify your identity.