Privacy Policy

1. Who We Are

Privo ("the Service") is a privacy-focused URL shortener operated by BlueAT Network ("we," "us," or "our"). This Privacy Policy explains what information we collect, why we collect it, and how we handle it.

Our entire infrastructure runs on the Cloudflare Developer Platform, which allows us to operate a fast, reliable service while keeping the cost low.

2. Information We Collect

Anonymous Link Creation (No Account)

When you shorten a link without signing in, we store only:

• The original URL you submitted
• The generated shortcode
• An optional custom shortcode (if you provided one)
• The date and time the link was created
• The destination page's public title, description, site name, and preview image address, read automatically when the link is created (see Section 4)
• A copy of the destination's preview image, if it has one

We do not store your IP address, browser fingerprint, device information, or any personally identifiable information for anonymous link creation.

Privo Cloud Accounts

If you choose to create an account, we store:

• Your email address — stored in a Cloudflare D1 SQL database
• Your links — stored in a separate Cloudflare D1 database, associated with your account
• Uploaded Media — images you uploaded for custom SEO tags

What We Never Collect

• Click analytics or link visit statistics
• IP addresses of visitors who follow shortened links
• Browser fingerprints or device identifiers
• Cookies for tracking or advertising purposes
• Location data
• Social media profiles or demographic information

3. How We Store Your Data

4. Link Previews and the Safety Page

When you shorten a link

When you create a short link, our servers make a single request to the destination page to read the information it makes publicly available: its title, description, site name, and preview image address (from its Open Graph, Twitter Card, and standard HTML tags). We only read what the page serves to an anonymous visitor. If the page has a preview image, we also download a copy (up to 5 MB, PNG, JPEG, GIF, WebP, or AVIF only) and store it.

The request identifies itself as PrivoBot and comes from Cloudflare's network, not from your device. We do not pass your IP address or any other information about you to the destination.

What a short link shows

A short link's page carries the destination's title, description, and preview image so that previews in social apps, messaging apps, and search engines look like the destination. This information is public: anyone who has the short link can see it.

The safety page

When someone opens a short link, they are shown a safety page that states where the link goes and sends them on after 20 seconds, or immediately if they choose to proceed. The page runs in the visitor's browser. We do not track which links people open and we do not store visitor information.

Other websites may also link to the safety page directly. In that case the destination and the name of the sending site come from the address of the link, are shown in the visitor's browser, and are not stored by us.

Third-party resources

Our pages, including the safety page, load fonts from Google Fonts and icons from Font Awesome. When your browser loads these, those providers receive standard request information such as your IP address, under their own privacy policies. We do not control or receive that data.

Site owners

If you run a website and want a stored preview of your page removed, contact [email protected].

5. How We Use Your Information

We use the limited data we collect solely to:

• Provide the link shortening and redirection service
• Generate link previews that match the destination (titles, descriptions, and images)
• Manage your account (if you create one)
• Send transactional emails (e.g., account verification, password resets)
• Respond to support requests or abuse reports
• Enforce our Terms of Service

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes. Ever.

6. Email Communications

All emails sent by Privo originate from @privo.fyi addresses via Cloudflare Email Sending. We send emails only when necessary:

• Account verification
• Important service announcements
• Responses to your support inquiries

We do not send marketing emails, newsletters, or promotional content unless you explicitly opt in (and we currently offer no marketing opt-in).

7. Data Sharing and Disclosure

We do not sell or share your personal information. We may disclose limited information only in the following circumstances:

• Legal requirements: If required by law, subpoena, or court order, we may disclose the minimal information necessary to comply.
• Abuse prevention: If we detect links to illegal content, we may report relevant information to appropriate authorities or abuse prevention services.
• Service providers: Cloudflare (including D1 and R2) processes data on our behalf as our infrastructure provider, bound by their own privacy commitments and our instructions.

8. Data Retention

We retain your information only as long as necessary to provide the Service:

When you delete your account, your email and associated links, including their stored previews, are removed from our databases and storage. Anonymous links persist until they are removed for abuse or at our discretion.

9. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Update your email address or account details
• Deletion: Delete your account and associated data
• Portability: Export your links before account deletion
• Objection: Object to certain data processing (though we process minimal data by design)

To exercise any of these rights, contact us at [email protected].

10. Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted via HTTPS/TLS
• Cloudflare D1 databases are encrypted at rest
• Account and link databases are logically separated
• Preview images are type-checked and size-limited before storage, and served with restrictive security headers
• Access to production databases is restricted and logged
• We regularly review our security practices

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Third-Party Links

Shortened links created with Privo may direct to third-party websites. The safety page shows you the destination before you are redirected, but we cannot verify that a destination is authentic or safe. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any website you visit, and to report suspicious links to [email protected].

12. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we may notify users via email (for account holders) or a notice on the Service.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• General inquiries: [email protected]
• Privacy-specific requests: [email protected]
• Abuse reports: [email protected]