Frequently asked questions

A link management platform: create safe short links, generate QR codes, measure valid clicks with clear reports, and manage your team and branded domains in one place.

No. The server never fetches destination URLs when creating or redirecting links. We validate the URL format and scheme (HTTP/HTTPS only) and reject private addresses and dangerous schemes such as javascript:, data: and file:.

Every redirect request is recorded, but a "valid click" excludes bots, link-preview crawlers (WhatsApp, Slack…), browser prefetching and HEAD requests. Requests can therefore exceed clicks — by design.

They are estimates. Instead of storing IP addresses we use a non-reversible, daily-rotating hash, so several people behind one network may count as one visitor and one person changing networks or browsers may count twice.

Yes, on plans that include it. Passwords are stored as strong hashes, never appear in URLs or logs, and guessing is rate-limited. After a correct password the visitor receives a short-lived access grant.

It stops redirecting and shows an explanatory page. Limits are enforced atomically in the database even under concurrent requests, and bots or previews never consume the allowance.

Yes, on eligible plans. Publish a TXT record to prove ownership, then point the domain to the platform. A domain is activated only after DNS and HTTPS are actually verified.

Yes: a versioned REST API (v1) with OpenAPI documentation, scoped access tokens, idempotency keys for link creation and signed webhooks.

Use the Report Abuse page. Our moderation team reviews reports manually; links are never disabled automatically just because they were reported, which protects legitimate users.

No. Once a visitor reaches the destination they can copy its address. Passwords and click limits control access through the short link only.