← Back to Home

Privacy Policy

Last updated: June 30, 2026

1. Information We Collect

TinyURL at Scale collects minimal data necessary to operate the Service. We may collect:

  • URLs you submit — The long URLs you shorten are stored to enable redirection
  • IP addresses — Used solely for rate limiting to prevent API abuse
  • Timestamps — When short URLs are created, for record-keeping
  • URL hashes — SHA-256 hashes of URLs for deduplication purposes

We do not collect personal information such as names, email addresses, or payment details. No account registration is required to use the Service.

2. How We Use Information

The information we collect is used to:

  • Redirect short URLs to their original destinations
  • Prevent duplicate entries through URL deduplication
  • Enforce rate limits and protect against abuse
  • Maintain the operational integrity of the Service

We do not sell, trade, or share your data with third parties for marketing or advertising purposes.

3. Data Storage

All data is stored securely in Neon PostgreSQL, a serverless database provider. Data is encrypted in transit via TLS/SSL and at rest through the database provider's encryption mechanisms. The database is hosted in secure cloud infrastructure with restricted access controls.

4. Third-Party Services

The Service relies on the following third-party providers:

  • Vercel — Hosting and edge network for the application
  • Neon — Serverless PostgreSQL database provider
  • Google Fonts — Typography delivery (no tracking cookies)

Each provider has its own privacy policy. We recommend reviewing their policies for complete information.

5. Data Retention

Shortened URLs and their associated metadata are retained indefinitely to ensure short links continue to work. IP addresses used for rate limiting are stored temporarily and automatically expire within a short window (typically minutes to hours).

If you wish to have a specific URL mapping removed, please contact us with the short URL in question.

6. Your Rights

You have the right to:

  • Request information about data we hold related to your usage
  • Request deletion of specific URL mappings you created
  • Opt out of using the Service at any time

Since we do not require accounts or collect personal identifiers, data requests should include the specific short URLs in question for identification.

7. Changes to Privacy Policy

We may update this Privacy Policy periodically. Changes take effect immediately upon posting. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.

8. Contact

For privacy-related questions or data requests, please reach out via the project repository or contact Nilambar Sonu directly.