Privacy Policy
Data controllerTOMERA, Bangkok, Thailand
LINE
We don’t sell click data and we don’t build profiles of your visitors. What we collect is listed below — Free and Pro expire raw click rows after 30 days; Max keeps them while you stay on Max.
01 · WHAT WE STORE ABOUT YOU
Your email address, so you can sign in and we can warn you before a link leaves. An optional display name, your default timer and timezone, and notification prefs. Your links, aliases, destinations and timers. Your plan. If you subscribe later, Stripe handles billing — card details never touch our servers. That’s it: no phone number, no password to leak.
An email, your links, a plan. Nothing else we need.
02 · WHAT A CLICK RECORDS
Every redirect writes one row. It is deliberately coarse — enough to tell you a link is working, not enough to follow a person around.
* Plan retention: Free and Pro delete raw click rows after 30 days (not rolled into a shadow aggregate). Max keeps those rows for the life of the link while you stay on Max — downgrade and the 30-day window applies again. Link totals stay either way. If a link is deleted sooner, its rows leave with it.
03 · COOKIES
One cookie, set only after you sign in, holding your session. No analytics tags, no advertising pixels, no third-party scripts on the redirect path — which is also why the hop is fast. Visitors who merely follow a link get no cookie at all. Marketing pages show a short notice so you know what’s used; acknowledging it stores a preference in localStorage on your device, not a tracking cookie.
One session cookie for you. None for your visitors. Essential only.
04 · WHO ELSE TOUCHES IT
Cloudflare
Runs the redirect and stores links. Global.
Stripe
Takes payment when you subscribe. Holds your card, we don’t. US/EU.
Resend
Sends sign-in and expiry email. EU.
Three sub-processors, no ad networks. We’ll update this list here before adding a fourth.
05 · WHAT YOU CAN ASK FOR
Schedule account deletion from Settings by typing your email. You get 14 days to cancel; short links keep working during that grace period. After hard-delete, account data, links, click rows and analytics totals are removed. Compact link archives may remain without your account attached. Canceling starts a 24-hour cooldown before you can schedule again. The same email can sign up afterward — old data is not restored. If you’ve paid through Stripe, invoices stay with Stripe for tax retention — we never hold card numbers. Under GDPR and PDPA you can also object, correct, restrict or ask for a copy of what we hold — email us and a human replies.
14-day grace from Settings, then hard-delete. Other requests go to email.