New short links also have a separate daily allowance per IP, shared by visitors and signed-in accounts on the same network. Its counter saves only a keyed daily identifier and count, not raw IP addresses, URLs or account identifiers. It resets by the Cairo calendar day and removes the previous live identifiers on rollover or startup; protected backups may retain older copies. These identifiers are pseudonymous, not fully anonymous. Reused links do not consume this allowance, and existing redirects remain available when it is reached. Interrupted creation attempts may count conservatively. This counter does not use tracking cookies or browser fingerprints.
For visitors without an account, the homepage can keep the last three newly created short-link paths in this browser’s local storage, plus a show/hide preference. It does not save original destination URLs, account details or creation times in that history. Anyone using the same browser can view it. Hiding the list does not erase it; use Clear history or clear site storage to remove it. It is not synchronized to an account or another browser, and this feature does not upload the saved history to AQSR. Signed-in creations, reused links and failed or blocked requests are not added.
Link checks with Google Web Risk
When checks are enabled, AQSR sends the complete normalized destination URL, including any query parameters and fragment, to Google Web Risk to check for malware, deceptive content and unwanted software. Authorized administrators can also submit URLs for a manual lookup. Our adapter does not open or download the destination. Do not submit private links, access tokens or other confidential URL data for checking.
A reported threat prevents creation of a new short link. Existing links are not automatically swept, rescanned on every visit or disabled by these checks. If no usable result is available because checking is off, unavailable or limited, shortening can continue with an unchecked notice. No detected threat is not a safety guarantee; a warning can also be mistaken. Google processes the submitted URL under the applicable Google Cloud service terms. Google Cloud information: Cloud privacy notice and Data processing terms.
Usage counters and temporary results
To limit provider use and abuse, we retain aggregate monthly/daily request counts and a current-day keyed identifier derived from the requesting IP address, with its count. This counter does not save the raw IP address, account identifier or browsing history. The daily identifiers shown to authorized administrators are pseudonymous, not fully anonymous; a shared network can represent several people. They change on the next Pacific-calendar day, and the previous day's live map is removed on rollover or startup. Protected backups can retain older copies. Aggregate monthly counts remain saved; failed attempts can count too. Hosting/protection logs may separately process IP addresses as described below.
Visitors share temporary lookup results so cached checks need not send another request to Google. Cached results are reused only during the configured cache period or Google's threat validity. Expired cache entries are removed during later checks or a restart. Administrators can see up to 20 recent results and creation outcomes in memory, with query parameters/fragments omitted; this is not a permanent audit log. No tracking cookie or browser fingerprint is added for these counters or checks.
Public contributions and pricing
Contributor names or aliases, roles, biographies, uploaded photos and website/social links entered for publication can appear publicly on the Contributors page. Public contributor content is separate from private account profiles. Contact us to request correction or removal; older files, caches or protected backups may retain copies. External social/destination services have their own privacy practices. Pricing pages describe plans only: payment collection and paid-subscription activation are not enabled in this version.
Private accounts and Google sign-in
Google sign-in is restricted to approved email addresses; public registration is unavailable. Other accounts are rejected without saving an AQSR account or issuing an authenticated session. Account type (User or Administrator) is separate from approval to sign in: administration also requires Administrator access. Creating an account does not assign ownership of existing or anonymous links. Administration also checks the approved Google issuer and stable account identifier on every protected request.
Google provides your stable account identifier (sub), email and verification status. We retain these, registration and latest sign-in times and, with your permission, your first and last names and Google photo URL. Google photos load directly without a page referrer; this does not itself store an image file in AQSR. We do not request Gmail, Drive or Contacts access, receive your Google password or retain Google access, refresh or ID tokens. Google’s privacy policy: https://policies.google.com/privacy.
Links created while signed in
Links created while you are signed in are stored with your verified Google account identifier and shown in My links. Your personal list only includes links associated with that identifier; authorized administrators can manage all site links. Older anonymous links and other accounts’ links are not assigned to you, including when destinations match. Anyone with a short link can still open it and discover its destination while it is available. Signing out or deleting your account does not remove the links or this association; a later approved sign-in with the same identifier can show them again.
Profile and preferences
You can save a display name and upload an account photo. AQSR stores the uploaded photo privately as a processed JPEG and serves it through authenticated account or administrator routes. Choosing Use Google photo removes the custom photo from the current account record; it does not remove the saved Google photo URL. Names and photos do not grant permissions.
We save your language, theme, time zone, date/time format and security, email-update and newsletter preferences. The three notification preferences start enabled for new accounts; existing choices are preserved. They can be changed in account settings. Email delivery and newsletter sending are not enabled in this version; saving a preference does not send mail or enroll you with an external mailing service. Browser theme/language and table-layout choices may also be saved in browser storage.
Activity, sessions and administration
Account activity records event type and time, such as sign-in/out, settings changes, exports and session revocations. The account view shows up to 50 recent events from the last 30 days; older entries are pruned when the account record is updated, not by a scheduled deletion task. Sessions also store a coarse browser/operating-system label derived from the browser’s request header, alongside the session hash, account reference, anti-forgery value and expiry. You can view and end your sessions; see Cookies & Browser Preferences for session durations. Administration sessions also retain their creation and last-activity times.
Authorized administrators can view account names/photos, emails, account types, plan labels, registration/latest sign-in times, newsletter choices, recent activity and session counts; they can revoke sessions and export selected user-list fields. Account-type history retains up to 100 changes per account, including old/new type, acting administrator identifier and time. Link moderation keeps the actor identifier, time, status and reason with the link. User access does not permit administration; removing sign-in approval denies subsequent protected requests. The separate administration area currently blocks account-type changes and administrator-account deletion; the additional approval mechanism is not active.
Export and account deletion
From account settings you can select profile, photo, preference and notification data to export. Administrators can additionally export site links with original/short addresses, creation dates and current status; these are site-wide links, not proof of personal ownership. Exports exclude session credentials and other accounts’ private data. File download is available; email export remains inactive.
For ordinary user accounts, deletion is available after a recent Google sign-in and explicit confirmation. This removes the current account record, saved custom photo/preferences/activity and its authenticated sessions. It does not delete existing short links, link-moderation records, records retained in other accounts or protected backup copies. It does not remove the separate sign-in approval configuration: a later approved sign-in can create a new account. There is no automatic account-deletion period. Contact [email protected] for further review or deletion requests.
What this policy covers
This policy explains how AQSR handles information involved in creating and opening short links, operating the website, and responding to messages.
You do not need a user account to use the current service.
Links you submit
We store the original web address, its short code and the date the record was created, so we can redirect visitors.
A web address can itself contain personal or confidential information. Submit only information you are comfortable sharing through a link. Anyone with the short link can open it and discover its destination.
Technical request information
Website requests involve technical information such as an IP address, request time, requested address, browser information, and security events.
AQSR and its hosting and protection providers may process this information to deliver the service, enforce request limits, investigate errors, and respond to misuse.
Messages you send
If you email us, we receive your email address, message, and any attachments or information you include.
We use this information to respond, investigate a reported problem, or assess a request concerning a link or personal information. Send only the information needed for that purpose.
Browser preferences
The website uses browser storage for interface preferences, including the theme and any language preference saved through an available language selector.
These preferences help keep your choices when you return using the same browser. See Cookies & Browser Preferences for details.
Service providers
AQSR uses Namecheap for hosting and Cloudflare for website delivery and protection. These providers may process technical information as part of providing their services.
Their privacy information is available at:
External destination websites operate independently and have their own privacy practices.
Sharing and retention
We do not sell personal information.
Information may be shared with providers as needed to operate the service, or disclosed where necessary to meet applicable legal obligations or investigate misuse.
Link records are retained to support redirection and the Link Availability & Disabling policy. Messages and operational information are kept for as long as reasonably needed for their purpose. Providers may apply their own retention periods to technical logs.
Deleted or changed records may remain in protected backups until those backups are replaced or expire.
Your requests
Email [email protected] to ask about information you have provided or request correction or deletion.
We may need enough information to identify the relevant record and verify your relationship to it. Available rights and exceptions depend on the law applicable to your circumstances.
Updates
Changes to this policy will be published here with their revision date.