Last updated: March 30, 2026
TL;DR: We respect your privacy. We collect minimal data to provide our service, never sell your information, and use industry-standard security to protect it.
The controller responsible for this website and the Shorty service under the EU General Data Protection Regulation (GDPR) is Wunderdata GmbH, Angermünder Straße 20, Haus B 104, 16247 Joachimsthal, Germany. Full provider details (Impressum) are published on our Impressum page. Data processing is primarily governed by EU and German data protection law.
When you create an account, we collect:
When someone clicks your shortened links, we collect:
We automatically collect certain technical information including cookies, log data, and usage statistics to improve our service and ensure security.
Visiting a shortened destination link does not rely on first-party marketing cookies for the click. When you use our web application, we set a strictly necessary HTTP-only session cookie after login to keep you signed in until you log out or the session expires. Subscriptions and billing use Stripe Checkout and the Stripe Customer Billing Portal; card and billing details are handled on Stripe's systems in line with Stripe's privacy policy.
We use collected information to:
We do not sell your personal information. We may share data with:
We implement industry-standard security measures including:
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
If the GDPR applies to our processing of your personal data, you have in particular the rights under Articles 15–22 GDPR, including to:
You may also lodge a complaint with a supervisory authority. For our seat in Berlin, the competent authority is typically the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI).
To exercise your rights, contact us at privacy@shorty.com. You are not required to use a specific form; please describe your request clearly so we can respond within one month (subject to any permitted extension under Art. 12 GDPR).
We use cookies and similar technologies to:
You can control cookies through your browser settings, but some features may not work properly if disabled.
We retain your data as long as your account is active. After account deletion, we delete or anonymize your personal data within 90 days, except where we're legally required to retain it longer. Analytics data is anonymized after 30 days.
Some subprocessors (e.g. payment or hosting) may process data outside the European Economic Area (EEA). Where required under Chapter V GDPR, we rely on appropriate safeguards such as the European Commission's standard contractual clauses (SCCs) or adequacy decisions. A copy of relevant safeguards may be provided upon request where not already published by the processor.
The service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16 without applicable parental consent under national law. If you believe we have collected such data, please contact us immediately so we can delete it.
We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or through our service. Continued use of Shorty after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, please contact us:
We process personal data in line with the GDPR and, where applicable, the German Federal Data Protection Act (BDSG) and other EU or German laws. If you reside outside the EEA, additional local laws may apply; we will respond to valid requests to the extent required by applicable law. This policy is not a promise of rights under non-EU statutes unless explicitly stated.