Skip to content
EndURL

Privacy Policy

Last updated: 23 August 2026

This policy explains what EndURL ('we') collects, why, and the choices you have. The short version: we collect what the service needs to work, we do not sell personal data, and click analytics are engineered to avoid storing raw identifiers.

1. Data we collect from account holders

When you create an account we store your name, email address, authentication identifiers from your sign-in provider, and optional profile fields (company, role, timezone). Billing is processed by Razorpay; we store subscription state and invoice metadata but never card numbers.

2. Data we process about link visitors

When someone opens a short link we process the request's technical details to perform the redirect and produce aggregate analytics for the link's owner. We do not store raw IP addresses. Visitor uniqueness is estimated with a salted hash that rotates daily, from which the underlying address cannot be recovered. Stored click events contain: timestamp, link identifiers, country/region derived at the network edge, device type, operating system, browser family, language, referrer domain and a bot classification.

  • No raw IP addresses at rest
  • No third-party advertising trackers on redirects
  • Link owners see aggregates, never individual visitor identities
  • Retention follows the workspace's plan and settings, then data is deleted

3. How we use data

To operate the service (redirects, analytics, billing, support), to secure it (abuse and fraud prevention, rate limiting, audit logging), and to communicate service matters (verification emails, security alerts, usage warnings). We do not sell personal data and we do not use customer link analytics for advertising.

4. Sharing

We share data only with processors needed to run EndURL — Google Firebase (hosting, authentication, database) and Razorpay (payments) — under their respective data-processing terms, and where required by law.

5. Your rights

You can access and update profile data in Settings, export your links and analytics, and request account deletion, which removes personal data and tombstones your links. For any privacy request, contact privacy@endurl.com. Depending on your jurisdiction you may have additional statutory rights; we honor verified requests accordingly.

6. Contact

Privacy questions: privacy@endurl.com. We aim to respond within 7 days.