Privacy Policy
Last updated: August 2026
The short version: we hash your password, we don't sell your data, and you can delete what's yours whenever you want. Everything below is the long version.
Passwords hashed
Stored with bcrypt, never as plain text.
HTTPS everywhere
Every connection to URLClipper is encrypted.
Never sold
Your data isn't sold or handed to advertisers.
You're in control
Delete your links or account whenever you want.
Your password
"••••••••••"
Typed once, at signup or login.
bcrypt hash
$2b$12$Kx9f…
One-way. Can't be reversed back to your password.
Stored value
hash only
The plain password is never saved, anywhere.
Introduction
Welcome to URLClipper. This Privacy Policy explains what information we collect when you use URLClipper, how we use that information, and how we handle the information associated with your account and shortened URLs.
By using URLClipper, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
Depending on how you use URLClipper, we may collect the following information:
- Account information: your name and email address when you create an account.
- Authentication information: information required to authenticate your account and maintain your signed-in session.
- URLs: the original URLs that you submit to be shortened.
- Short-link information: generated short codes, optional titles, creation dates, and click counts associated with your shortened URLs.
How We Use Your Information
We use the information collected through URLClipper to provide and operate the service.
- Create and manage your URLClipper account.
- Authenticate you and maintain your signed-in session.
- Create and manage shortened URLs.
- Display your saved URLs and their associated information in your dashboard.
- Track the number of clicks on shortened URLs.
- Allow you to add, change, or remove optional titles associated with your URLs.
- Allow you to delete URLs from your account.
- Maintain, troubleshoot, and improve the service.
Your Account
When you create an account, URLClipper stores the information necessary to provide your account and its associated features.
You are responsible for providing accurate information and for keeping your account credentials secure.
Password Security
Your password is never stored as plain text. When you create an account or change your password, it's run through bcrypt, a one-way hashing algorithm built specifically for password storage, before it's saved.
Only the resulting hash is kept in our database. When you log in, your password is hashed again and the two hashes are compared — your actual password is never stored, logged, or visible to us at any point.
Cookies and Authentication
URLClipper uses a browser cookie to maintain authentication for signed-in users. The authentication cookie is configured as an HTTP-only cookie so that it is not directly accessible to client-side JavaScript.
This cookie is used to recognize your authenticated session when you access protected features of URLClipper.
URLs and Short Links
When you create a shortened URL, URLClipper stores the original URL and generates a unique short code that can be used to access it.
If you are signed in, your shortened URLs are associated with your account so that you can manage them through your dashboard.
You can delete URLs associated with your account through the available deletion functionality.
URL Titles and Click Information
URLClipper allows users to optionally add a custom title to a shortened URL. Titles are stored with the corresponding URL and can be changed or removed by the user.
URLClipper also maintains a click count for shortened URLs. The current system records the number of times a shortened URL is accessed.
Sharing of Information
We do not sell your personal information. We only use information as necessary to operate, maintain, and improve URLClipper and to provide the features described in this Privacy Policy.
If third-party infrastructure or service providers are used to operate URLClipper, information may be processed by those providers as necessary for the operation of the service.
Data Security
We take reasonable measures to protect information stored and processed by URLClipper, including hashing passwords with bcrypt and serving the site over HTTPS. That said, no internet-based service or method of electronic storage can be guaranteed to be completely secure.
Data Retention
Account and URL information may remain stored while it is required to provide the service.
Users can delete shortened URLs associated with their account through the dashboard. Account deletion functionality may be provided separately as the service develops.
Children's Privacy
URLClipper is not intended to knowingly collect personal information from children who are not permitted to use the service under applicable law.
Changes to This Privacy Policy
We may update this Privacy Policy as URLClipper develops or as our practices change. When changes are made, we will update the "Last updated" date shown on this page.
Contact Us
If you have questions about this Privacy Policy or how URLClipper handles information, you can contact us at:
theinfrabrains@gmail.com