Privacy Policy

Last updated: October 6, 2026

Introduction

Welcome to URLcut.ai ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening and management service.

Information We Collect

Information You Provide

  • Account Information: Email address, password, and profile information
  • Payment Information: Billing details processed securely through our payment providers
  • User Content: URLs you create, customize, and manage through our service
  • Communications: Messages you send to our support team or through our platform

Information Collected Automatically

  • Usage Data: Click data, access times, device information, and IP addresses
  • Analytics: Information about how you interact with shortened URLs
  • Cookies: Essential cookies, and analytics and attribution cookies only if you accept them (see Cookies below)
  • Device Information: Browser type, operating system, and device identifiers

Cookies

The first time you visit, we ask whether you accept analytics and attribution cookies. Essential cookies are always on because the site cannot work without them, and functional cookies support features you choose to use. Analytics and attribution cookies are set only after you click "Accept All". If you click "Decline", we do not set them and we remove any we set earlier. You can change your choice at any time with the Cookie settings link at the bottom of every page.

Essential (always on)

  • refreshToken: keeps you signed in. Lasts for your sign-in session.
  • .AspNetCore.Antiforgery.*: protects forms against cross-site request forgery. Deleted when you close the browser.
  • password_reset_*: used only while you reset a password. Expires after 5 minutes.
  • urlcut_tfd: remembers a trusted device after two-factor sign-in, if you choose that. Lasts 30 days.

Functional

  • Crisp (crisp-client/*): our support chat loads when you accept cookies or open the chat. It then stores an identifier so the conversation survives page changes.
  • uc_chat_opened (local storage): remembers that you opened the support chat, so it stays available on the next page.
  • Google Sign-In: set by Google on its own domain when you use "Sign in with Google".
  • Product Hunt badge: the badge in our footer is an image served by Product Hunt, whose network provider may set a short-lived cookie (__cf_bm) on producthunt.com.

Analytics and attribution (only if you accept)

  • _ga, _ga_*: Google Analytics, to understand how the site is used. Set by Google, up to 2 years (most browsers cap this at about 13 months).
  • _gcl_aw, _gcl_au (and _gcl_ls in local storage): Google Ads, to record which ad click brought you here. Set by Google, 90 days.
  • uc_gclid: records which Google ad click brought you here, so we can measure our ads. Lasts 90 days.
  • uc_ft: records the first page you visited on our site and where you came from, so we can tell which pages bring people in. Lasts 90 days.

Before you choose, these two first-party values (uc_gclid and uc_ft) are kept only in your browser tab for that visit and are discarded if you decline. An ad click id is only linked to your account if you accept. When you decline, Google Analytics runs without cookies and receives no identifier for you.

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Generate analytics and insights for your shortened URLs
  • Send administrative information, updates, and security alerts
  • Respond to your comments, questions, and customer service requests
  • Detect, prevent, and address technical issues and fraudulent activity
  • Comply with legal obligations and enforce our terms
  • Improve our AI-powered URL suggestion features

Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party vendors who assist in operating our platform (hosting, analytics, payment processing)
  • Business Transfers: In connection with any merger, sale of company assets, or acquisition
  • Legal Requirements: When required by law, court order, or to protect our rights
  • With Your Consent: When you explicitly authorize us to share information

We never sell your personal information to third parties.

Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Secure data centers with physical security measures

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

  • Account Data: Retained while your account is active and for 90 days after deletion
  • Analytics Data: Retained according to your plan. Detailed click data is kept for a limited window then deleted after a short grace period on Free and Basic, and retained while your subscription is active on Pro
  • Financial Records: Retained for 7 years as required by law
  • Safety and Abuse Records: We retain link metadata and moderation records to investigate and respond to abuse

Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Rectification: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to our processing of your information
  • Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@urlcut.ai

Children's Privacy

Our service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Related Policies