Privacy policy

Overview

redirect (https://redirect.kshv.me) is an open-source tool that lets you create short links to your social profiles. This policy explains what information we collect, how we use it, and what we do not do with your data.

Information we collect

When you create an account, we collect:

• Your OAuth provider user ID (from Google or GitHub sign-in)
• Your display name and email address from your OAuth profile
• The profile data you choose to save: username and social link URLs

When someone visits a redirect link, we process the request to serve the redirect. We do not log individual click events or build visitor profiles.

How we use your information

• To authenticate you and associate your profile with your account
• To store and serve your redirect links
• To operate, maintain, and improve the service
• To respond to support requests or abuse reports

What we do not do

• We do not sell your personal information
• We do not run click analytics or tracking pixels on redirects
• We do not use your data for advertising profiles or third-party marketing
• We do not share your profile data except as needed to operate the service (see Third parties below)

Public information

Your chosen username and social links are publicly visible on your profile page (e.g. /{username}). Anyone with the URL can view this information. Do not add links or usernames you want to keep private.

Third-party services

• Authentication — Google and GitHub via NextAuth.js. Their privacy policies apply to sign-in.
• Database — Supabase (PostgreSQL) stores profile data.
• Hosting — Vercel serves the application.
• Redirect destinations — When a visitor follows a link, they leave redirect and are subject to the destination site's policies.

Data retention

We retain your profile data for as long as your account is active. You can delete your profile by removing all links and changing your username, or contact us to request account deletion. We may retain limited records as required by law or to prevent abuse.

Security

We use industry-standard practices including HTTPS, secure session cookies, server-side database access, and row-level security on the database. No system is perfectly secure; use the service at your own discretion.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data. To exercise these rights, open an issue on GitHub or email hi@kshv.me.

Children

redirect is not directed at children under 13. We do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Open a GitHub issue or email hi@kshv.me.