Privacy Policy

Last updated: 2026-03-27

What we collect

When you create or visit a short link, we may collect:

• IP address — to count clicks and prevent abuse
• User-Agent — browser/device info sent with every request
• Referer — the page you came from, if your browser sends it
• Uploaded files — stored as-is until the link expires or is deleted

If you create an account, we also store your username and a hashed password.

How we use it

• Click statistics are shown to the link owner
• We do not sell, share, or transfer your data to third parties
• We do not use cookies for tracking — only a session cookie for authentication

Legal basis (GDPR)

We process personal data under the following legal bases:

• Legitimate interest — collecting IP addresses and request metadata to prevent abuse and provide click statistics (Art. 6(1)(f) GDPR)
• Contract performance — storing account data and uploaded files to provide the service you requested (Art. 6(1)(b) GDPR)

Your rights

Under GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Data portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest

Authenticated users can delete their own links, files, and file keys directly from the account page. For other requests, contact us (see below).

Data location

All data is stored on Microsoft Azure servers in North Europe (Ireland). No data is transferred outside the EU/EEA.

Data retention

• Anonymous links and files expire after 30 days
• Authenticated users' data is kept until manually deleted
• You can delete your links and files at any time from your account page

Contact

Questions? Open an issue at github.com/Lifemotion/rwlk.