Privacy Policy

01Who we are

warplo ("warplo", "we", "us") is the URL shortener at warplo.link, with its website and dashboard at app.warplo.link. We are responsible for the personal data described here.

Questions about this policy or your data go to [email protected].

02What we collect

When you sign in

You sign in with Google. With your permission, Google tells us:

• your email address, and that Google has verified it,
• your name as shown on your Google account,
• a Google account ID, a number that stays the same even if you change your email.

We also record when your account was created and when you last signed in. We don't ask Google for your contacts, files, profile photo or anything else.

When you make links

For each short link we store the destination address, the slug (the part after warplo.link/), when it was created, and when it expires if you set an expiry. Each link is tied to your account so only you can see, manage and delete it.

When anyone clicks a link

See If you click a link below.

Technical information

Like every website, our servers see your IP address and browser details when you visit. We use the IP address briefly to limit how many sign-in attempts or new links come from one network, which keeps out automated abuse. We don't save it alongside your account or your links.

03If you click a warplo link

You don't need an account to follow a short link. When you do, we add one to a counter for:

• which short link was clicked,
• the day it was clicked,
• the country the click came from, worked out by our network provider from the connection.

That's all we keep: totals per link, per day, per country. We don't record your IP address, which website sent you, or the exact time, we don't set cookies, and we don't try to identify you. The person who made the link sees only those totals.

04How we use it

• To run the service: signing you in, keeping you signed in, creating and redirecting links, and showing you your click stats.
• To keep warplo safe: checking destinations against lists of phishing and malware sites, limiting how fast links can be created, and investigating abuse reports.
• To contact you about your account, a problem with one of your links, or an important change to the service. We don't send marketing email.
• To meet legal obligations, for example responding to a valid legal request.

We rely on providing the service you asked for, and our legitimate interest in keeping it secure and free of abuse. We don't use your data for advertising and don't sell it.

05Who we share it with

We use a few providers to run warplo. They process data for us and only as needed to provide their service:

We may also share information if the law requires it, to protect people from fraud or harm, or as part of a sale or merger of warplo. If that happens, this policy keeps applying to your data.

06Cookies

warplo uses two cookies, both needed for signing in. There are no advertising or analytics cookies.

Both are set by warplo.link, can't be read by scripts, and are only sent over secure connections. People who just click short links get no cookies from us.

07How long we keep it

• Your account is kept until you ask us to delete it.
• Links are kept until you delete them. An expired link stops working right away but stays in your list until you delete it.
• Click counts are kept for 90 days, then deleted automatically. The dashboard shows the last 30 days. Deleting a link also deletes its counts.
• Sessions end after 30 days or when you sign out. Unfinished sign-in attempts are discarded after 10 minutes.
• Abuse reports and related records may be kept longer where we need them to prevent further abuse or meet legal obligations.

08Your choices and rights

You can delete any of your links yourself from the dashboard. Deleting a link stops it working everywhere, usually within a few minutes.

You can also ask us to:

• send you a copy of the data we hold about you,
• correct it. Your name and email come from Google, so changes there show up the next time you sign in,
• delete your account and all your links,
• stop using your data for a particular purpose, where the law gives you that right.

Email [email protected] from the address you sign in with, and we'll reply within 30 days. You can also complain to the data protection authority where you live.

To cut warplo's access to your Google account, remove it under Third-party apps & services in your Google account settings.

09Security

All traffic is encrypted. We never see or store your Google password. Session cookies are random, can't be read by scripts, and only a scrambled (hashed) form of each one is stored, so a copy of our database can't be used to sign in as you. Requests that change your links must come from our own website.

No system is perfectly secure. If we learn of a breach that affects your data, we'll tell you without undue delay.

10Children

warplo isn't meant for children under 13, or the minimum age for using online services where you live if that's higher. We don't knowingly collect their data. If you think a child has created an account, contact us and we'll delete it.

11Where data is processed

warplo runs on Cloudflare's global network, so links are copied to and answered from data centers around the world, and data may be processed outside your country. Our providers protect transferred data with the safeguards the law requires, such as standard contractual clauses.

12Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes we'll also tell you in the dashboard or by email before they take effect.

13Contact

Privacy questions and data requests: [email protected]

To report a harmful link, see Reporting abuse in our Terms of Service.