Privacy

What I collect

When someone clicks a trak.sh short link, I record: the destination URL, a hashed IP address (so I can count unique visitors without storing raw IPs), the user agent, the referrer (if your browser sends one), the country derived from the IP, and a timestamp. I do not record full IP addresses, query strings beyond UTM params, or any personal data from the destination page.

Where it lives

Everything is stored in a Neon Postgres database in the US. Auth sessions are managed by Better Auth. Payments are handled by Polar.sh. Emails are sent via Resend. Rate limiting uses Upstash Redis. Analytics dashboards run on Vercel. I do not sell data to anyone, ever.

What I don't do

• No advertising cookies
• No fingerprinting
• No third-party trackers on click redirects
• No selling click data to anyone
• No reading the contents of your destination URLs

GDPR / deletion

If you have an account, you can delete it at any time from Settings — that wipes all your links and click data immediately. If you want me to remove click data associated with a specific link you don't own (e.g. a short link someone else shared that points to you), email me at the contact below and I'll handle it manually.

Contact

Questions, concerns, deletion requests: shakirul@trak.sh.