Privacy Policy
Last updated: April 11, 2026
Overview
ChopURL ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.
Information We Collect
Account Information
When you register, we collect your email address, first name, and last name. You may optionally provide a profile avatar.
Link Data
We store the original URLs you submit and the short URLs we generate. If you enable password protection, a hashed version of the password is stored.
Analytics Data
When someone clicks a short URL, we record the timestamp, referrer URL, user agent string (parsed into device type, browser, and operating system), and IP-derived geographic data (country and city). We do not store raw IP addresses after geographic lookup.
Authentication Data
Passwords are hashed with bcrypt before storage. If you enable two-factor authentication, encrypted TOTP secrets and hashed backup codes are stored. API keys are stored in hashed form.
Social Sign-In (Facebook, Google)
If you choose to sign in with Facebook or Google, we receive
your name, email address, profile picture URL, and the
provider's unique user ID. We request only the
email and public_profile scopes from
Facebook, and openid, email, and
profile from Google. We use this data solely to
create or sign in to your ChopURL account. We never post to
your social profile, never read your friends list or posts,
and never share this data with third parties. You can
unlink a provider at any time from Settings → Security, or
delete your account entirely — see our
Data Deletion
page.
How We Use Your Information
- To provide and maintain the URL shortening service
- To generate analytics and reports for your links
- To authenticate you and secure your account
- To send transactional emails (password resets, verification)
- To improve the service and fix issues
Data Sharing
We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data only when required by law or to protect our rights.
Data Retention
Account data is retained while your account is active. Analytics data retention depends on your plan: 7 days for free accounts, 90 days for Pro, and unlimited for Enterprise. You may delete your account at any time, which will remove all associated data within 30 days.
Cookies
We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. See our Cookie Policy for details.
Security
We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and rate limiting. Two-factor authentication is available for all accounts.
Your Rights
- Access and download your personal data
- Correct inaccurate information
- Delete your account and associated data
- Object to data processing
- Data portability
Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For privacy-related inquiries, email us at [email protected].