Useful analytics, less personal data.

LixRL processes only the data needed to create and resolve short links, authenticate accounts, show link analytics, prevent abuse, and operate paid subscriptions. We do not place tracking cookies on people who open a short link.

For each redirect, we may record:

• The time of the click and the short link that was opened.
• Country, region, and city supplied by Cloudflare edge metadata—not GPS or precise location.
• Device category, browser, and operating system inferred from the User-Agent header.
• The referring site’s origin, with its path and query string removed.
• A bot classification used to keep automated traffic out of human analytics.
• A keyed daily hash of a coarse IPv4 /16 or IPv6 /64 prefix for approximate unique counts.

The readable IP address and network prefix are not written to LixRL’s database. The daily visitor signal rotates and is not designed to identify a person across days or unrelated links.

Guest users can create one link with 24-hour validity. To enforce that allowance and detect obvious automation, we process the request IP together with coarse browser, device, operating-system, and language categories. We store a keyed HMAC, a risk score, and quota timing—not the raw inputs.

Signed-in Free accounts have a separate daily creation allowance. Pseudonymous request metadata may be used to enforce it and investigate attempts to evade limits.

Elixpo Accounts provides authentication. We receive and store an opaque Elixpo account ID, email address, display name, avatar URL when available, account role, tier, and session records. We do not receive or store your password.

We store the destinations, short codes, titles, campaign labels, tags, expiry settings, branded subdomain claims and mappings, and active state you choose. API keys are stored as hashes; the full key is shown only when created. For paid plans, we retain subscription identifiers and billing status needed to apply entitlements. Payment details are handled by the checkout provider and are not stored in LixRL’s database.

We use data to provide redirects and dashboards, calculate analytics, enforce plan limits, secure accounts, respond to abuse, troubleshoot failures, and meet legal obligations.

Service providers process limited data on our behalf:

• Cloudflare Pages, D1, and KV host the application, database, cache, and edge request metadata.
• Google Safe Browsing receives destination URLs submitted for reputation checks.
• Elixpo Accounts authenticates users, and Elixpo Pay handles hosted checkout and subscription events.

We do not sell personal data or share it for behavioural advertising. We may disclose information when legally required, to investigate abuse or security incidents, or during an organizational transaction subject to appropriate protections.

• Guest links expire after 24 hours and are removed by scheduled or activity-triggered cleanup.
• Click-event access and retention follow the account plan: 7 days on Free, 30 days on Pro, and 365 days on Business.
• Deleting a link removes its associated click history. Account data is retained while the account is active and as needed for security, disputes, or legal compliance.
• Abuse reports and audit records are retained as needed to investigate incidents and protect the service.

We use access controls, scoped API keys, keyed hashing, encrypted transport, secret management, and provider security controls. No internet service can guarantee absolute security; report suspected issues to hello@elixpo.com.

From LixRL you can export links as CSV, delete individual links and their analytics, revoke API keys, and cancel paid renewal. You can request access, correction, or deletion of account data by emailing hello@elixpo.com. We may need to verify the request and may retain limited records where law or security requires it.

Depending on where you live, local law may provide additional rights such as objection, restriction, portability, or a complaint to a data-protection authority.

We may update this policy as the product or its providers change. The current revision date appears at the top, and material changes will be announced through an appropriate product or repository channel.

Privacy questions and requests can be sent to hello@elixpo.com.