Privacy Policy
Last updated: 2 July 2026 · Applies to the URLshrink Android app and the urlshr.ink website.
What we collect
- Account data. The app works without an account using an anonymous identifier. If you create an account, we store your email address. Authentication is provided by Google Firebase.
- Links you create. The destination URL, the short code, and when it was created.
- Click analytics. When someone opens a short link we record the time, the referring page (if any), and the browser user-agent string. We do not store the visitor's IP address.
- Purchase data. If you buy Pro, Google Play processes the payment. We store only a purchase token to validate the upgrade — never card details.
- Advertising. The free app shows rewarded ads via Google AdMob, which may collect device identifiers for ad delivery as described in Google's privacy policy. In the UK and EU the app asks for your consent before showing personalised ads; if you decline, ads are non-personalised. You can change this choice any time from the app's Pro tab.
What we don't do
- We don't sell your data.
- We don't read or share the images you place inside QR codes — they never leave your device.
- We don't track you across other apps or websites.
Where it's stored
Data is stored in Google Firebase (Firestore and Firebase Authentication). Requests to our API are processed by Netlify Functions.
How long we keep it
Links and analytics are kept until you delete them or delete your account. Deleting your account removes your links, click history, and authentication record permanently.
Deleting your data
You can delete your account and all data from inside the app (Pro tab → Delete account) or by following the steps on the account deletion page.
Your rights (UK & EU)
If you are in the United Kingdom or the European Union, the UK GDPR and EU GDPR give you rights over your personal data. We process data on these legal bases:
- Performance of a contract — storing your account, links, and purchase status so the service works.
- Legitimate interests — click counting and abuse prevention (for example daily limits).
- Consent — personalised advertising, which you can give or withdraw in the app at any time.
You have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate data;
- Erase your data (use the in-app deletion or the account deletion page);
- Port your data — request a copy of your links in a machine-readable format;
- Restrict or object to processing based on legitimate interests;
- Withdraw consent for personalised ads without affecting the rest of the service.
To exercise any of these rights, use the contact form. We respond within one month. You also have the right to complain to your supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EU, your national data protection authority.
Data is stored on Google Cloud infrastructure, which may involve transfers outside the UK/EEA. These transfers are covered by Google's compliance with UK and EU data-transfer rules, including standard contractual clauses.
Children
URLshrink is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13, and the app is not directed at them. Users aged 13–17 should have a parent or guardian's permission to use the app. If you believe a child under 13 has created an account, contact us and we will delete it promptly.
Changes to this policy
If this policy changes in a way that matters, we'll update this page and the "last updated" date above. Continued use of the app after a change means the updated policy applies.
Contact
Questions about this policy? Get in touch.