Initial draft — see the review note below.
Note: this text is an initial draft that reflects this app's actual behavior, not legal advice. The operator of this app should review it (ideally with a legal professional) before publishing it to the general public, especially for compliance with specific jurisdictions (e.g. Indonesia's UU PDP).
From Google sign-in: the email address, name, and profile picture Google provides when you sign in. This app never sees or stores your Google account password.
Links you create: destination URL, alias/short code, title, expiry date, and QR code appearance settings (including any logo you upload).
Click data (analytics): each time your short link is clicked, we record the click time and a handful of derived categories: referrer host (e.g. "instagram.com"), general device/OS/browser type, device language, and country code. Visitors' raw IP addresses and full User-Agent strings are never stored — only the small categories above, which are enough for the analytics charts and cannot be used to personally identify a visitor.
Cookies: a login session cookie, plus small cookies for your language and theme preference. No advertising or third-party tracking cookies.
Solely to run the app's features: authentication, showing your links & click stats, and (if enabled by the operator) checking destination URLs against Google Safe Browsing before a link is created, so this app isn't used to spread phishing/malware. Data is not sold or shared with third parties for advertising.
Google — for the sign-in process (OAuth), and optionally for URL safety checks (Safe Browsing API) if enabled by the operator. Both are also subject to Google's own privacy policy.
For as long as your account stays active. You can delete individual links anytime from the dashboard, and delete your entire account along with all related data (links, click stats) from the Settings page — account deletion is permanent and cannot be undone.
Privacy/data questions can be sent to rene.segara@dumpling.id.