Privacy Policy

Last updated: 2026-06-16

1. Data controller

The data controller for the fckurl service is Cognitys. We collect the minimum data needed to run a URL shortener, and we never sell it.

2. What we collect

• Links: the destination URL you submit and the short code we issue.
• Click analytics: for each redirect — timestamp, a truncated SHA-256 hash of the source IP (never the raw IP), referrer, and user agent.
• Account data (if you sign up): your email, optional display name, and — if you use Google sign-in — your Google account identifier.
• Custom domains (if you add one): the hostname and its DNS verification state.

3. What we do not collect

• Raw IP addresses.
• Any personal data beyond what is needed to operate the Service.

4. Legal basis

We process this data to provide the service you request (Art. 6(1)(b) GDPR) and for our legitimate interest in operating, securing, and preventing abuse of the Service (Art. 6(1)(f) GDPR).

5. Cookies

Signed-in users receive a session cookie for authentication and an anti-forgery token cookie for form security. Anonymous visitors who only shorten links receive no tracking cookies. We use no third-party advertising or analytics cookies.

6. Third parties

• Google — only if you choose "Continue with Google", for authentication.
• Email delivery — transactional emails (confirmation, password reset, domain status) are sent via our email provider.
• Hosting — the Service is hosted on European infrastructure.

7. Retention

Links and their analytics are kept while your account or link is active. Deleting a link or your account removes the associated data.

8. Your rights

Under the GDPR you may access, correct, export, or delete your personal data, and object to or restrict its processing. You can delete your account and all associated links from the dashboard at any time, or contact us to exercise any of these rights.

9. Contact

For any privacy request, contact us, or reach the publisher via cognitys.com.