Privacy Policy / Datenschutzerklärung

This privacy policy explains how The Old World Links processes personal data. It is provided as information, not as a contract.

1. Controller

Andreas Schmidt
Im Spargelfeld 2, 38542 Leiferde, Germany
Email: legal@the-old.world

2. What data we process

• Account username and email address
• Password hash — we never store plain-text passwords
• User-created subdomains
• User-created shortlinks and their target URLs
• Server logs, including IP addresses, user agents, timestamps, and referrer where available
• Click statistics for shortlinks (timestamp, referrer, user agent, anonymised/hashed IP)
• Abuse reports and contact form messages

3. Why we process data

• Account creation and login
• Providing the shortlink and redirect service
• Redirecting users to target URLs
• Preventing abuse and spam
• Security logging
• Handling abuse reports
• Basic technical operation of the service

4. Legal basis

Account and shortlink functionality is based on the performance of the service and the contract-like relationship between users and this platform. Security logging, abuse prevention and basic operational logs are based on our legitimate interests in operating a safe and functional service. Should optional analytics, marketing cookies or newsletter features be added in the future, consent will be obtained before processing.

5. Cookies and local storage

Technically necessary session cookies may be used for login and security (e.g. CSRF protection). No optional analytics or marketing cookies are used by default. If optional analytics are added in the future, a cookie consent banner will be implemented before loading them.

6. Click tracking

The service may store click events for shortlinks. Stored data may include the timestamp, the shortlink used, the referrer, user agent, and an anonymised or hashed representation of the visitor’s IP address. Raw IP addresses are not retained longer than necessary. Click statistics are used for service functionality, abuse prevention, and basic analytics for link owners.

7. Storage duration

• Account data is stored while the account exists.
• Shortlink data is stored until deleted by the user or disabled due to abuse.
• Server logs are deleted or anonymised after a reasonable retention period.
• Abuse reports are stored as long as needed to process the report and document abuse handling.

8. Data sharing

We do not sell personal data. Our hosting provider may process data as a data processor. Our email provider may process contact and abuse emails. When a user follows a shortlink, the target website will receive data according to that site’s own practices (e.g. IP address, referrer, user agent depending on browser settings).

9. Your rights

Under applicable data protection law you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Object to processing
• Data portability where applicable
• Lodge a complaint with a supervisory authority

10. Contact

For questions about your data, use the contact form or the abuse report form.