Privacy

What we store

For links, we store the short slug, destination URL, creation time, expiry time, and account owner when there is one. For accounts, we store your name, lowercase email address, and a securely hashed password, never the password itself.

For each click, we store the time, referrer domain, country code supplied by our hosting provider, device class, and a visitor hash used to count unique visitors. We do not store raw IP addresses.

When you create an account, and each time a link is made, we also store a rough location: a country code and a city name, worked out by our hosting provider from the connection. This is the same source as the click data above, it is approximate, and it is often wrong about the city. We never store the IP address it came from.

Support requests include the subject, message, time, and your account ID when signed in. We also keep short-lived rate-limit records to protect the service from abuse.

When a link is reported, we store the reported address, the reason if one is given, the time, and a hash of the reporter's IP address so the same person cannot flood the queue. The address itself is never stored.

How we use it

We use this information to deliver redirects, manage accounts, provide aggregate link analytics, respond to support, maintain security, and meet legal obligations. Anonymous links expire after 90 days; related records may remain briefly in backups or where the law requires retention.

We check every destination before shortening it, and again from time to time afterwards, against Google Web Risk. That means the destination address is sent to Google. Nothing else goes with it: not who you are, not your IP address, not whether you are signed in.

We do not sell personal information. We do not use advertising trackers. Providers that host or operate Sweet As may process information only to provide those services to us.

Your choices

You can ask what personal information we hold about you, ask us to correct it, or report a link at swt.as/report. To remove your account, ask via the support form and we'll remove your account and links. We may retain limited information for security, legal, or fraud-prevention reasons.

Where data is handled

Sweet As is operated from New Zealand and uses cloud providers that may process data in other countries. We choose providers with appropriate security safeguards and protect access to production systems.