Last updated: October 4, 2026
tnylnk.com (“the Service”, “we”) shortens URLs and shows a redirect page before sending visitors on to the destination. There are no user accounts. This page explains what data is collected, why, and for how long.
When you create a short link we store the destination URL, the short alias, the creation date and the expiry date you choose. This is needed to operate the redirect. Anyone who knows a short link can open it and view its click statistics, so do not shorten URLs that contain private information.
To stop spam and malicious links, we store a salted, one-way hash of the IP address used to create each link (never the address itself) and use it to enforce creation limits. Link creation may be protected by Cloudflare Turnstile, and destination URLs may be checked against Google Safe Browsing; those services process the data needed for the check under their own privacy policies.
When someone opens a short link we record the time of the click, the referring website (if any), an approximate country derived from the visitor’s IP address, and a coarse device and browser category. We do not store visitors’ IP addresses or use this data to identify individuals. Automated requests such as link previews and crawlers are not counted.
The Service runs on Cloudflare, which processes IP addresses and request data in order to deliver pages and protect the Service from attacks, under Cloudflare’s own privacy policy.
We use Google Analytics to understand how the home and information pages are used: pages viewed, approximate country, device and browser type, and when a link is created (not which link). Visitors in the European Economic Area, the UK and Switzerland are measured without analytics cookies; elsewhere Google Analytics may set cookies to recognise returning visitors. Google processes this data under its own privacy policy. Short-link and stats pages do not load Google Analytics. The Service sets no advertising cookies, and no ad network is active yet; before one is enabled it will be named here, and where the law requires it you will be asked for consent first.
Individual click records are deleted after 90 days; a link’s total click count is kept. An expired link is deleted, together with its click data, 30 days after it expires; links that never expire are kept until they are removed. The hashed IP address stored with a link is erased 30 days after the link is created. Disabled links are kept without their click data, so that the same short link cannot be reused.
Because there are no accounts, we cannot tie data to you personally. If you created a link and want it removed, or want to report a link, write to us via the contact page with the full short link.
The Service is not directed at children under 13, and we do not knowingly collect personal information from them.
We may update this policy as the Service changes. The date at the top of this page shows when it was last revised.
Questions about this policy can be sent via the contact page.