Privacy Policy

1. Who we are and what this covers

MyLink is a link-management service operated by WizusLabs at mylink.wizuslabs.com. This policy applies to the MyLink website, account features, short-link redirects, and private management tools.

2. Information MyLink processes

Links and workspace data

When you create or manage a link, MyLink stores the destination URL, short code, optional name, private note, tags, folder, expiration, timestamps, and archived state. Private notes are available only in the owner's management workspace and are never displayed on public redirects. This information is needed to redirect visitors and let you manage the link. A short code remains reserved after archival so an old shared URL cannot later point somewhere else.

Browser-only workspaces

You may use MyLink without an account. An essential, HTTP-only workspace cookie gives that browser access to its private management desk. Link records remain on MyLink's server so public redirects continue to work. If you remove the cookie, MyLink cannot restore that browser's private management access; archive links before clearing it if you want them to stop redirecting.

Account information

If you create an account with email and password, MyLink stores your name, email address, a password hash, account methods, and session records. We do not store your plaintext password. If you choose Google or another configured sign-in provider, MyLink receives the provider account identifier, name, email address, and any profile image supplied for sign-in. Provider access, refresh, and ID tokens are discarded after identity verification and are not retained for later provider API access.

Redirect activity

MyLink records genuine aggregate performance only: total redirects, the most recent redirect time, and daily redirect counts for a rolling activity window. It does not store a redirect visitor's IP address, referrer, user agent, advertising identifier, or individual click history.

Security data

To limit abuse, MyLink stores short-lived, keyed counters for protected actions such as authentication attempts. The keys are one-way digests rather than raw email addresses, IP addresses, or workspace identifiers. Account sessions are intentionally stored without IP address or user-agent values. MyLink does not make automatic server-side requests to your saved destinations; the link desk lets you open a destination directly when you choose to review it.

3. How we use information

• create, resolve, manage, search, organize, export, expire, and archive your short links;
• authenticate accounts, maintain sessions, and protect account actions;
• show aggregate redirect performance and expiration status;
• prevent abuse, investigate faults, and keep the service secure; and
• comply with applicable law and enforce the Terms of Use.

MyLink does not sell personal information, run advertising, or use link activity for interest-based marketing.

4. Cookies

MyLink uses only essential cookies for a browser workspace, an account session, the selected account mode, and temporary OAuth security state. These cookies support requested product and security functions. MyLink does not use advertising or cross-site tracking cookies.

5. Service providers and disclosures

MyLink runs on Cloudflare Workers and D1, which process service data on our behalf. If you choose Google sign-in, Google processes the sign-in request under Google's Privacy Policy. Other configured identity providers are involved only when you choose them.

Opening a short link or choosing Open destination sends an ordinary web request from that visitor's browser to the destination, so the destination may receive information such as the visitor's IP address and browser details under its own policy. MyLink does not send an automatic server-side destination check. We may also disclose information when required by law, to protect people or the service, or as part of a lawful business transfer with appropriate safeguards.

6. Retention and deletion

Active and archived link records are retained while needed to operate the workspace and preserve short-code safety. Archiving stops a link from redirecting but does not itself erase its record. Daily redirect aggregates are pruned to the current activity window. Short-lived abuse counters expire after their protection window, and normal account sessions expire after seven days unless revoked sooner.

You can delete an account from Account settings. Account deletion removes the account identity, sign-in records, sessions, destinations, private labels, private notes, tags, folders, and analytics. The former short codes remain reserved and no longer redirect. Browser-only workspaces are separate and are not deleted with an account.

7. Your choices and rights

You can review and edit current links, archive links, export shown link data, sign out all account sessions, unlink eligible sign-in methods, or delete your account using MyLink's controls. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or portability of personal information.

For a privacy request, contact wizuslabs@gmail.com. We may need to verify that you control the relevant account or workspace. We aim to respond within five business days and will complete verified requests within the period required by applicable law.

8. Security and international processing

We use HTTPS, HTTP-only cookies, scoped access checks, bounded request sizes and timeouts, rate limits, and database constraints to protect the service. No online service can guarantee absolute security. Cloudflare and an identity provider you choose may process information in countries other than your own, subject to their safeguards and applicable law.

9. Children

MyLink is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us so we can investigate and remove it where required.

10. Changes and contact

We may update this policy as MyLink or applicable requirements change. We will publish the revised policy here and update the date above. Material changes will be highlighted where reasonably appropriate.

Developer: WizusLabs
Privacy and support: wizuslabs@gmail.com