THE SHORT VERSION
- We get your name and email from Google when you sign in. We never see your Google password.
- We store the links you make and count clicks on them: when, which country, and which website the click came from.
- We don't store the IP address of people who click your links, and we don't build profiles of them.
- No ads, no selling data, no third-party tracking scripts.
- New links are checked against phishing and malware lists, which means those services see the destination address.
01Who we are
warplo ("warplo", "we", "us") is the URL shortener at warplo.link, with its website and dashboard at app.warplo.link. We are responsible for the personal data described here.
Questions about this policy or your data go to hello@warplo.link.
02What we collect
When you sign in
You sign in with Google. With your permission, Google tells us:
- your email address, and that Google has verified it,
- your name as shown on your Google account,
- a Google account ID, a number that stays the same even if you change your email.
We also record when your account was created and when you last signed in. We don't ask Google for your contacts, files, profile photo or anything else.
When you make links
For each short link we store the destination address, the slug (the part after warplo.link/), when it was created, and when it expires if you set an expiry. Each link is tied to your account so only you can see, manage and delete it.
When anyone clicks a link
See If you click a link below.
Technical information
Like every website, our servers see your IP address and browser details when you visit. We use the IP address briefly to limit how many sign-in attempts or new links come from one network, which keeps out automated abuse. We don't save it alongside your account or your links.
03If you click a warplo link
You don't need an account to follow a short link. When you do, we record a click with:
- which short link was clicked and when,
- the country the click came from, worked out by our network provider from the connection,
- the name of the website that sent you, if your browser shares it. That's the site name only, such as
news.example.org, not the full page address.
We don't record your IP address, set cookies, or try to identify you. The person who made the link sees only totals: clicks per day and per country.
04How we use it
- To run the service: signing you in, keeping you signed in, creating and redirecting links, and showing you your click stats.
- To keep warplo safe: checking destinations against lists of phishing and malware sites, limiting how fast links can be created, and investigating abuse reports.
- To contact you about your account, a problem with one of your links, or an important change to the service. We don't send marketing email.
- To meet legal obligations, for example responding to a valid legal request.
We rely on providing the service you asked for, and our legitimate interest in keeping it secure and free of abuse. We don't use your data for advertising and don't sell it.
06Cookies
warplo uses two cookies, both needed for signing in. There are no advertising or analytics cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
__Host-warplo_session | Keeps you signed in | 30 days, or until you sign out |
__Host-warplo_oauth | Protects the sign-in step from forgery | 10 minutes |
Both are set by warplo.link, can't be read by scripts, and are only sent over secure connections. People who just click short links get no cookies from us.
07How long we keep it
- Your account is kept until you ask us to delete it.
- Links are kept until you delete them. An expired link stops working right away but stays in your list until you delete it.
- Click records are kept for up to 3 months, then deleted automatically. The dashboard shows the last 30 days.
- Sessions end after 30 days or when you sign out. Unfinished sign-in attempts are discarded after 10 minutes.
- Abuse reports and related records may be kept longer where we need them to prevent further abuse or meet legal obligations.
08Your choices and rights
You can delete any of your links yourself from the dashboard. Deleting a link stops it working everywhere, usually within a few minutes.
You can also ask us to:
- send you a copy of the data we hold about you,
- correct it. Your name and email come from Google, so changes there show up the next time you sign in,
- delete your account and all your links,
- stop using your data for a particular purpose, where the law gives you that right.
Email hello@warplo.link from the address you sign in with, and we'll reply within 30 days. You can also complain to the data protection authority where you live.
To cut warplo's access to your Google account, remove it under Third-party apps & services in your Google account settings.
09Security
All traffic is encrypted. We never see or store your Google password. Session cookies are random, can't be read by scripts, and only a scrambled (hashed) form of each one is stored, so a copy of our database can't be used to sign in as you. Requests that change your links must come from our own website.
No system is perfectly secure. If we learn of a breach that affects your data, we'll tell you without undue delay.
10Children
warplo isn't meant for children under 13, or the minimum age for using online services where you live if that's higher. We don't knowingly collect their data. If you think a child has created an account, contact us and we'll delete it.
11Where data is processed
warplo runs on Cloudflare's global network, so links are copied to and answered from data centers around the world, and data may be processed outside your country. Our providers protect transferred data with the safeguards the law requires, such as standard contractual clauses.
12Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes we'll also tell you in the dashboard or by email before they take effect.
13Contact
Privacy questions and data requests: hello@warplo.link
To report a harmful link, see Reporting abuse in our Terms of Service.