legal
Privacy Policy
Effective 01/01/2026
who we are
val.io ("the Service") is operated by [LEGAL_ENTITY]. For any privacy question, contact privacy@val.io.
what we collect
- Account — your email address (for magic-link sign-in) and the date you joined.
- Links — the destination URLs you shorten and their short codes.
- Click analytics — for each visit to a short link: a timestamp, the visitor's country (derived from IP by Cloudflare — we do not store the raw IP address), the referring URL, and the User-Agent string (from which we derive coarse device, browser and OS categories).
- Billing — if you subscribe to Pro, our payment processor (Stripe) handles your card data; we store only your Stripe customer ID and subscription status. We never see or store full card numbers.
- Cookies — a first-party session cookie to keep you signed in, and a short-lived first-party
refcookie for referral attribution. No third-party advertising or tracking cookies.
how we use it
To provide the Service: create and resolve short links, show you analytics, authenticate you, and process subscriptions. We do not sell your personal data, and we do not use it for advertising.
legal basis (GDPR)
We process account and link data to perform our contract with you; analytics on the basis of our legitimate interest in providing link statistics; and billing data to comply with our contractual and legal obligations.
retention
Click analytics on Free accounts are retained for the last 30 days and pruned thereafter. Pro accounts retain full click history for the life of the link. Deleting a link removes its analytics. Deleting your account removes your account, links and all associated analytics.
processors we share with
- Cloudflare — hosting, edge delivery, and the database/cache that store your links and analytics.
- Stripe — subscription billing and payment processing.
your rights
You can access and export all of your data, and erase your account, at any time from your settings. Depending on your jurisdiction you may also have rights to rectification, restriction, and to lodge a complaint with a supervisory authority. To exercise any right, contact privacy@val.io.
changes
We may update this policy; material changes will be reflected by the effective date above. Questions? Email privacy@val.io. Governing law: Bulgaria.