Last updated: November 2, 2026
Information used by URLBit
URLBit uses information to provide sign-in, saved links, analytics, contact handling and subscriptions.
- Account information: the email and profile information provided through Google sign-in, along with your stored role, plan and access status. URLBit does not offer or store a separate URLBit password.
- Link information: destination URL, short code, optional title and description, owner record, status and creation time.
- Recorded clicks: an event identifier, short code, timestamp, device category, browser category and referring hostname when available. Missing referrers appear as Direct. Country currently records Unknown; the app does not currently derive geographic location or unique-visitor counts.
- Contact and signup forms: the name, email, message or subscription-interest information you submit. These are saved for review. Submitting a newsletter form records interest; it does not itself send a newsletter.
- Billing references: Stripe customer, Checkout and subscription identifiers, subscription status, billing-period information and verification timestamps used to determine plan access. Test and live billing records are kept separately; test payments do not establish a live paid subscription. Payment details are entered on Stripe's hosted page, not stored in URLBit's Users table.
Marketing email preferences
The signup screen includes an optional, unchecked choice: Send me URLBit tips, product updates, and occasional offers. Declining does not prevent account creation or change your plan. Google sign-in alone does not subscribe you. We store your choice separately from your account email, with the displayed wording, source and update time. Existing accounts are not automatically enrolled. Leaving the signup box unchecked on a later sign-in keeps your existing preference.
You can change your choice under Account → Email preferences. Uncheck and save to opt out. This records a preference in URLBit; it does not itself send messages or connect an external email service.
Cookies and technical processing
Sign-in uses a secure session cookie. Embedded Preview sign-in can use a separate Google popup and a partitioned cookie. Browser settings that block cookies or popups may affect sign-in.
The service processes request information, including user-agent and referrer headers, to serve redirects and categorize click events. Request address information may be used for abuse/rate limiting. Hosting and platform services may also process network addresses, operational logs, error reports and app-usage telemetry. The click-event fields listed above are not an exhaustive description of provider logs.
Service providers
URLBit uses Teable for app hosting, data and authentication integration, Google for sign-in, Stripe for hosted Checkout and billing verification, and Cloudflare for malware/phishing domain filtering. Safety checks send the destination hostname to Cloudflare over encrypted DNS; URL paths, query strings, account emails and visitor identifiers are not included in those requests. Cloudflare can see the app server's network address and process DNS queries under its own resolver privacy policy. Results are cached for no longer than 60 seconds. Their own privacy terms also apply to information they process. We may disclose information when legally required. We do not sell personal information.
Retention and account access
There is no automatic inactivity-based deletion of links or click history currently implemented. Archiving a link retains its record and stops redirects. Owners can use Delete permanently to remove the link record and its recorded click events. Renaming retains prior short codes with the link to preserve its analytics until deletion. Retired codes remain reserved to prevent reuse. After deletion, minimal reservation records retain the short codes, former link ID, owner record ID and creation month to preserve creation limits and prevent old shared URLs from being reassigned; destination, title, description and recorded click history are removed. This does not erase account records, provider logs or backups. Removing account access retains account and link records, and does not automatically disable public links; it is not permanent erasure.
Requests and choices
Contact mediaminthub@gmail.com to request access to, correction of or deletion of your data, or to ask about marketing preferences. We will consider requests under applicable law. Link owners can export recorded click events as CSV; that export is not a complete account-data download.
You can control cookies in your browser and stop submitting optional information. Avoid putting sensitive information in destination URLs or link descriptions: anyone with a working short URL can follow its destination. Public link access does not require a URLBit account.
Security and children
No service can guarantee absolute security. URLBit checks destination domains against Cloudflare's malware/phishing DNS filter before creation, destination changes, reactivation and redirects. IP-address URLs and destinations resolving to private or reserved networks are blocked. A failed safety check temporarily prevents creation or redirection. This does not scan page contents, downloads or subsequent redirects and cannot detect every harmful page. A short URL is not proof that its destination is safe. The service is not intended for children under 13. Contact us if you believe a child has provided personal information.
Updates and contact
Changes will be reflected on this page with an updated date. For privacy questions, contact mediaminthub@gmail.com.
