1. What data we collect

When you sign in with your Google account, we collect your display name, email address and a unique Google identifier. When you use the service, we store the links you create (destination URL and short code) and click data for those links, including date/time and, when possible, the approximate country/city derived from the IP address of the person who clicked. For security, we also keep a sign-in history with date/time, IP address and information about the browser/device used.

2. How we use this data

We use your data to: authenticate you and keep your account secure (including single-session control, which prevents two people from using the same login at the same time); operate link shortening and redirection; show usage statistics for your own links; and investigate misuse of the service.

To show the website in your language, we use the language configured in your browser and, when available, the approximate country of your connection. This information is used only to choose the language and is not stored.

3. Who we share it with

We do not sell or share your personal data with third parties for marketing purposes. We use Google Sign-In for authentication, subject to Google's privacy policy. We may use infrastructure services (hosting, database) that process data on our behalf and under our instructions.

4. Local browser storage

After you sign in, we keep your access token (JWT) in your browser's session storage so you stay signed in while using the dashboard. This token is removed when the session ends or when you sign out. We also store in your browser (local storage) that you have already seen the cookie notice, so it is not shown again.

5. Cookies

We use a technical cookie (antiforgery), essential to protect the website against cross-site request forgery attacks, and a language preference cookie (shrt_lang), which remembers the language you chose. Neither is used for tracking or advertising. We also use Google Analytics, which sets its own cookies to measure, in aggregate, how the website is used (pages visited, traffic source, device type), subject to Google's privacy policy. The ads shown on shrt.com.br are provided by third-party networks, which may set their own cookies to display and measure ads, subject to those networks' privacy policies.

6. How long we keep your data

We keep your data while your account is active. When you delete your account from your account area, it is deactivated immediately — you can no longer sign in and your links stop working publicly — but the data (account, links and metrics) is preserved in our systems for auditing and security purposes and is no longer accessible to you.

7. Your rights

You may request access to, correction of or permanent deletion of your personal data at any time, under the Brazilian General Data Protection Law (LGPD), by contacting us at the email address below.

8. Contact

Questions or requests about your personal data can be sent to ziptech.br@gmail.com.

9. Changes to this policy

We may update this Privacy Policy at any time. The version in force is always the one published on this page, with the date of the last update shown at the top. This policy is a translation of the Portuguese version, which prevails in case of any discrepancy.