Privacy

What this site keeps when you use it, who else sees it, and for how long. It is run by one person, Luki. There are no ads, no analytics and no tracking scripts, and every script and font comes from this site itself.

Most of what follows is about your IP address. Wherever this page says an address is stored, what goes into the database is the full address.

Short links

A new link is stored with its long URL and the time it was made, together with the address it was made from. That address is what gives you the same short link back when you shorten the same URL twice in a day, and what spaces out floods of new links. All of it stays for as long as the link exists.

Every time a short link is opened, the click is counted and logged with the time, the page it came from (the referrer your browser sends), your browser's user agent, your address, and the country Cloudflare places you in. Link previews fetched by chat apps and crawlers are not logged. The click log is kept indefinitely: nothing deletes it automatically.

Whoever makes a link gets a private statistics link. Anyone who has it can see how many clicks the link got and when, which sites they came from (the site name only, never the full address), and from which countries. It never shows addresses or user agents. I can see everything in the database.

Cloudflare

Every request to this site passes through Cloudflare first. It sees your address, the page you ask for and what your browser sends with it, and handles that under its own privacy policy. The country in the click log comes from Cloudflare too; there is no location database here.

Server logs

The web server in front of this app keeps an ordinary access log: address, time, the page asked for, the referrer and the user agent. Statistics links and the private DNS page are left out of it, and out of the server's error log.

The app's own log records the address of every sign-in attempt on the admin page, and of every chat registration attempt together with the name asked for and whether it worked. Rate limits hold addresses in memory for a day at most and never write them anywhere.

Chat accounts

Signing up on the chat page sends the name and password you pick to the homeserver, matrix.l4f.cc, which creates the account. This site passes the password on and keeps no copy of it. While you type a name, the page asks the homeserver whether it is still free, so names you try out reach it too. Everything after that, your messages, rooms and profile, lives on the homeserver.

Cookies and your browser

None, unless you press the light/dark switch: that sets a cookie named theme, holding light or dark for a year, so pages load in the colours you picked. Signing in to the admin area sets a session cookie for a week and one that remembers the device for a year. There are no others.

A few conveniences, such as My links on the home page, remember things in your browser's own storage. That never reaches the server. Anyone using the same browser can see it, and clearing this site's data in your browser removes it.

Tools

The tools do their work in your browser; what you type, scan or upload there is not sent anywhere. The two exceptions say so on their pages: IP info asks the server which address your request came from, and the PHP obfuscator sends your code to the server, which transforms it in memory and neither stores nor logs it.

Questions

The other services linked from the menu run on their own and are not covered here. Questions about this page, or want a link of yours taken down? Get in touch: