Privacy Policy

The short version

• ZRO is a link shortener with analytics. To do that job we record each tap on your links and the account you sign in with.
• We do not save IP addresses, we do not record who tapped, and we do not set cookies on the people who tap your links.
• We run no advertising, no ad pixels and no third-party analytics. We do not sell personal information.
• Your links and taps are readable only by your own account.
• You can delete your account and its data yourself, at any time, from the Account page.

What we collect

Your account. Your email address and, if you sign in with a provider, the name and profile ID that provider shares. If you make a profile card, the handle, display name, bio and picture you choose, which are public on your card.

Your links and settings. The destination of each link, its short name, the links on your card and how you have styled it, and your plan.

Each tap on your links. This is the analytics you came for. For every tap we store:

• the time, and the link that was tapped;
• a rough location (country, region and city) that our host works out from the network. It is never precise;
• the device type, system, browser, language, and the first 400 characters of the browser’s user-agent text;
• the screen size, time zone, connection type and referring page, which a small script on the redirect page reports;
• the app or site the tap came from, any UTM tags on your link, and what happened next: whether the app opened, the in-app browser was left, or the website loaded;
• an anonymous visitor code (see below).

Payments. If you subscribe, Stripe takes your card details and we never see or store them. We keep Stripe’s customer and subscription IDs, your plan and its status.

Messages to us. If you use Help on the dashboard, we receive your message together with your email and handle so we can reply.

What we do not collect

• IP addresses. We read the address of a visitor’s request once, to mix it into an anonymous code and to look up a rough location. The address itself is not saved.
• Names, emails, phone numbers or accounts of the people who tap your links.
• Precise location, contacts, photos, or a list of the apps installed on a device. Which app opens is decided by standard links, and we only record the outcome.
• Anything for advertising: no ad networks, no remarketing, no tracking pixels from other companies.
• Passwords. There are none. You sign in with a provider or an emailed one-time link.

People who tap your links

To count unique visitors without knowing who they are, we mix a visitor’s address and browser details with a secret value that only we hold, and keep only the one-way result. We call it the visitor code. It lets your dashboard tell new people from returning ones. It is not a name, we cannot turn it back into an address, and it is not shared with anyone. Because the same person on the same network and browser gets the same code, the law may still treat it as personal data, so we handle it that way.

If you use ZRO, you decide to measure your audience and you are responsible for telling them. Mention in your own privacy notice that links go through a link service that records approximate location, device and referrer for analytics. For this data, we act on your behalf and use it only to run your analytics.

How we use it

• To make your links open the right app and to show you what happened when people tapped.
• To run your account: sign you in, bill you, enforce plan limits and answer your messages.
• To keep ZRO working and safe: stopping abuse, spam and malicious links, and limiting how fast one address can ask for things.
• To tell you about your account: sign-in links, receipts and notices about this policy. We do not send marketing email.

Our grounds under the GDPR are: contract (to provide the service you signed up for), legitimate interests (security, preventing abuse and the visitor analytics you have asked us to run) and legal obligation (tax and accounting records for payments). We do not rely on consent because we do not use cookies or trackers that need it.

Cookies and similar technology

The page a visitor passes through when they tap a ZRO link sets no cookies and stores nothing on their device. The only cookies ZRO sets are for you, the creator, and they are strictly necessary, so there is no cookie banner.

Signing in with a provider

You can sign in with Google, Apple, GitHub or Discord, whichever are shown on the sign-in page. We receive your email, and usually your name and an ID for you at that provider. We do not receive your password, we cannot post for you, and we cannot read anything else in that account. That provider’s privacy policy covers what it does before it hands the details to us. Signing in by email uses a one-time link that works once.

Who we share it with

We share data only with the companies that help us run ZRO, and only what each needs. We do not sell it and we do not share it for advertising.

We may also disclose data when the law requires it, or to protect people or ZRO from harm. These companies may process data outside your country, including in the United States, under their own safeguards such as Standard Contractual Clauses.

How long we keep it

• Account, links and taps are kept while your account is open. Your plan decides how much history you can see (7 days on Free, 3 months on Pro, all of it on Forever), not what we hold.
• Delete your account from the Account page and we delete your account, links, taps and profile card straight away.
• Payment records are kept for as long as tax and accounting law require.

How we protect it

• Everything travels over an encrypted connection (TLS).
• Row-level security in the database means your account can read only its own links, taps and settings.
• Visitor codes are one-way, and addresses are not stored.
• Sign-in is by provider or one-time link. There are no passwords to leak. Sessions are verified on every request.
• Requests are rate limited to slow down abuse.

No service is perfectly secure. If a breach puts your rights at risk, we will tell you and the regulators without undue delay, and within 72 hours where the law sets that deadline.

Your rights

Wherever you live, you can ask to see the data we hold about you, correct it, have it deleted, and take a copy. If you are in the European Economic Area or the United Kingdom, you can also object to or restrict how we use it and complain to your data protection authority. If you live in California, you can ask what we have collected and for it to be deleted or corrected, and we do not discriminate against you for asking. We do not sell personal information or share it for cross-context advertising, so there is nothing to opt out of.

To use any of these, open Help on your dashboard, or write to admin@zro.to from the address on your account. We reply within 30 days. If someone else made the request for you, we will ask for proof.

If you are someone who tapped a ZRO link and want something removed, tell us the link and roughly when, and we will pass it to the creator who owns it. We cannot look up a visitor by name because we do not hold names.

Children

ZRO is not for anyone under 13, or under 16 where the law sets a higher age. We do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.

Changes to this policy

When we change this page we will update the date at the top. For changes that matter, such as a new kind of data or a new company that handles it, we will also tell signed-in creators by email before they take effect.

Contact

Questions about this policy or your data? Open Help on your dashboard, or email admin@zro.to. Common questions are also answered in the FAQ.