Privacy Policy

At SHORT.bid, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, and safeguard your data when you use our URL shortening service.

1. Information We Collect

1.1 Account Information (via Google Sign-In)

We use Google OAuth 2.0 for authentication. When you sign in with Google, we receive:

• Your Google email address
• Your Google account identifier (used to link your account)

We do not receive or store your Google password.

1.2 Usage Data

When you use our service, we collect:

• URLs you submit for shortening
• Click analytics for your shortened links (referrer, approximate location, timestamp)
• IP address and browser information for security and analytics purposes

1.3 Cookies

We use a session cookie named shortToken to keep you logged in for up to 7 days. We also use a temporary oauth_state cookie during the Google login process for security purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the URL shortening service
• Authenticate your account securely via Google Sign-In
• Display click analytics and statistics for your links
• Process payments for premium subscriptions (via Stripe)
• Improve and optimize the performance of our service
• Prevent fraud and abuse

3. Third-Party Services

3.1 Google

We use Google OAuth 2.0 for user authentication. By signing in with Google, you are also subject to Google's Privacy Policy. We only request access to your basic profile information (email address and account ID).

3.2 Stripe

Payment processing is handled by Stripe. We do not store your credit card details on our servers. Stripe's data practices are governed by Stripe's Privacy Policy.

3.3 Analytics

We use Google Analytics to understand site usage. This may collect anonymized data about your visit. You can opt out using the Google Analytics Opt-out Browser Add-on.

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data only in the following limited circumstances:

• With service providers who assist us in operating the platform (e.g., payment processors, hosting)
• When required by law or to respond to legal processes
• To protect the rights, property, or safety of SHORT.bid, our users, or others

5. Data Retention

We retain your account information and link data for as long as your account is active. If you delete your account, all your data (links, analytics, and account information) is permanently deleted from our systems.

6. Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Secure authentication via Google OAuth 2.0 (no passwords stored on our servers)
• CSRF protection during the login flow
• Parameterized database queries to prevent SQL injection

While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet is 100% secure.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Delete your account and all associated data at any time from your profile settings
• Revoke SHORT.bid's access to your Google account via Google Account Permissions

8. Children's Privacy

SHORT.bid is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: support@short.bid
• Support page: short.bid/support.php