Privacy Policy
Last updated: 2026 · Operated by the OneLyte Association (onelyte.uk)
1. Data We Collect
Account holders: We store your email address, PBKDF2-SHA256 salted password hash, optional display name, and the short links and API keys you create.
Link visitors: When someone clicks a short link, we record aggregate click telemetry (timestamp, coarse country code from Cloudflare edge headers, referrer hostname, and coarse device/browser/OS category). We never store raw visitor IP addresses in click analytics.
2. Cookies
We use a single HttpOnly; Secure; SameSite=Lax session cookie (zlink_session) strictly for authenticated dashboard users. We do not use third-party advertising or tracking cookies.
3. Account & Data Deletion
You may delete individual links or permanently delete your entire account (including all links, analytics, and API keys) at any time from your Dashboard Settings.