Privacy Policy

1. Scope

This policy applies to the Shortlink Studio Chrome extension and the twks.cc short-link service. Anyone who knows a short-link address can open it and be redirected to its saved destination URL.

2. Information we process

• The URL entered by the user or selected from the current tab or link when the extension is invoked
• A custom alias entered by the user and the link creation time
• An anonymous Supabase user identifier, access token, and refresh token for each installation
• A password set by an owner or entered by a visitor when password protection is used
• Total clicks, last-click time, and daily clicks for the last seven days; repeated requests to the same link within ten seconds count once
• Infrastructure logs such as IP address, request time, and status code for security and incident response

We do not ask for identity information such as your name, phone number, or payment details.

3. Purposes

We process this information only to create and redirect short links, count clicks, protect links with passwords, display recent links, limit abuse, respond to incidents, and provide support. Anonymous user IDs distinguish link owners. We do not use the data for advertising profiles or sell it.

4. Storage and retention

Chrome local storage

Up to 12 recent short links and the anonymous authentication session are stored in the current Chrome profile. You can clear the recent list in the extension; uninstalling the extension removes its local data.

Service database

Destination URLs, aliases, anonymous owner IDs, and aggregate click data are stored in Supabase while needed to provide the service. Owner passwords are transmitted over HTTPS and stored only as salted bcrypt hashes. Plaintext passwords and visitor verification passwords are not stored or returned by the API. Daily click events are retained for seven days. Deleting a short link also deletes its click history. Security and operations logs follow Supabase and Vercel retention policies.

5. Service providers

We use Supabase for the database, anonymous authentication, and API execution, and Vercel for product-site hosting and twks.cc redirect routing. Data is transmitted over HTTPS.

6. Your choices and requests

Owners can pause, edit, or delete their links and view their own click statistics in the extension. Other users' statistics are not accessible. For access, correction, or deletion requests not available in the extension, email the relevant short link to 0xianjoung@gmail.com.

7. Chrome Web Store limited use

Information received from Chrome APIs is handled in accordance with the Chrome Web Store User Data Policy and Limited Use requirements. It is used only to provide the extension's single purpose and is not transferred for advertising, credit assessment, or sale.