Privacy

We keep the address you shortened, the short link, its QR image and the time it was made. If you are signed in, the link is tied to your account.

To stop abuse we also log the request: your IP address, your browser's user agent, the page you came from and the time.

Short links are public. Anyone who has one can open it, and anyone can open its stats page. Don't shorten an address that is itself a secret.

For each click we store the time, the IP address, the browser's user agent, the page the click came from, and a rough place worked out from the IP: country, city and a map point rounded to about 10 km.

Stats pages show totals, referring sites, device, browser, operating system, countries and cities. They don't show IP addresses. Crawlers and link previews are redirected but not counted.

Site owners can add the b59.link tag to count page views. The tag sets no cookie. For each view we store the time, the page's host and path, the host of the referring site, the device type, browser and operating system, and the same rough place as above.

The IP address is not stored for page views. To count visitors we turn the IP and user agent into a short scrambled code that is different for every site and changes every day, so it can't follow a person from one site to another or from one day to the next.

Browsers that send Do Not Track are not counted. A tracker's stats page is public unless its owner makes it private. Each site that uses the tag is responsible for telling its own visitors.

You don't need an account to shorten a link. If you make one, we store your email address, your name and profile picture if your sign-in gives them to us, a contact email if you set one, the time you last signed in, and your API key.

Sign-in runs through osec.one, our own sign-in service, with a code sent to your email or with Google or Apple. Session keys for the API and the emailed codes are stored only as hashes.

People use b59.link to run their own sign-up forms. When you join one, we store your email address, your name if you give it, the list you joined, the time, and whether you have unsubscribed.

The list belongs to the person who runs it. They can see it, export it and delete it. When they send a newsletter, we keep a copy of each message with its delivery status. Every newsletter carries an unsubscribe link.

Signing in sets three cookies that last 30 days: session, loggedin_user and user_object. They keep you signed in and nothing else.

Your browser also remembers your recent links and any trackers you made before signing in (b59_recent, b59_pending_trackers). That stays in your browser.

We count views of our own pages with our own tag, described above. There is no other analytics and no advertising script on b59.link.

• DigitalOcean hosts our server and database.
• Zoho ZeptoMail delivers our emails: sign-in codes, welcome and waitlist messages, and newsletters sent through our own email59.com.
• Google or Apple, only if you choose to sign in with them.
• OpenStreetMap serves the map pictures on stats pages, so its servers see the IP address of whoever opens a stats page.

Places are looked up on our own server from a copy of the DB-IP city database. No IP address is sent to anyone for that.

Nothing is deleted on a timer today: links, clicks and page views stay until they are removed. You can delete your trackers (their page views go with them), your lists, subscribers and newsletters yourself.

To have a short link, its click history or your whole account removed, or to get a copy of what we hold about you, write to us through the contact page and we'll do it.

If what we store changes, this page changes with it and the date at the top moves.

Biz59 LLC, New York, NY.