Privacy

Privacy Policy

Last updated: February 2026

The short version: We collect only what's necessary to run the service. We don't sell your data. We don't show you ads. We store your email and the links you create. You can request deletion of your data at any time by emailing us.

01 — Who We Are

xlip.uk is operated by UnsyncSoftware, an indie software project based in the Philippines. If you have any questions about this policy, you can reach us at [email protected].

02 — What We Collect

We collect the minimum data necessary to provide the service:

Data	Why We Collect It	Who It Applies To
Email address	Account creation, verification, and support	Registered users only
Password (hashed)	Account authentication — stored as a secure hash, never plain text	Registered users only
URLs you shorten	To provide the redirect service	All users
IP address	Click analytics and abuse prevention	All users (per click)
Click timestamps	To show you click analytics in your dashboard	Registered users

We do not collect your name, phone number, location, or any payment information directly. Donations are handled externally by Ko-fi and GCash.

03 — How We Use Your Data

Your data is used exclusively to:

Provide and operate the URL shortening service
Send you your email verification code on registration
Display click analytics on your dashboard
Detect and prevent abuse of the platform
Respond to support requests you initiate

We do not use your data for advertising, profiling, or marketing. We do not sell or share your data with third parties.

04 — Cookies & Tracking

xlip.uk does not use tracking cookies or third-party analytics tools. We do not use Google Analytics, Facebook Pixel, or similar services.

The only data stored in your browser is a JWT authentication token in localStorage, which keeps you logged in. This token is never shared with any third party and is cleared when you log out.

05 — Data Retention

We retain your data for as long as your account is active. Guest links (created without an account) are stored indefinitely unless removed by an administrator for abuse violations.

If you delete a link from your dashboard, it is permanently removed from our database immediately.

06 — Your Rights

You have the right to:

Access — request a copy of the data we hold about you
Correction — request that we correct inaccurate data
Deletion — request that we delete your account and all associated data
Portability — request your data in a readable format

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

07 — Third-Party Services

xlip.uk uses the following third-party services:

Resend — for sending verification emails. Only your email address is shared for this purpose.
Cloudflare — for DNS, CDN, and DDoS protection. Cloudflare may log request metadata as part of their service.
Ko-fi — for optional donations. Donation processing is handled entirely by Ko-fi under their own privacy policy.
GCash / InstaPay — for local donations. Transactions are handled by GCash under their own privacy policy.

08 — Security

We take reasonable steps to protect your data including:

Passwords are hashed using bcrypt — never stored in plain text
All connections are encrypted via HTTPS / TLS
Authentication uses short-lived JWT tokens
Admin tools are restricted to private network access only

No system is 100% secure. If you discover a security vulnerability, please disclose it responsibly by emailing [email protected].

09 — Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the date at the top of this page. Continued use of the service after changes means you accept the updated policy.

10 — Contact

Questions, concerns, or data requests:

📧 [email protected]
🌐 unsyncsoftware.com
📍 Philippines