Pely is a link shortener. We collect what we need to redirect your links and show you useful statistics, and as little about the people who click them as we can.
People who click a short link
- No cookies and no stored IP addresses. Redirects set no cookies. We never save the visitor's IP address.
- For each click we record the time, the country, region and city (derived by Cloudflare's network), the device type, operating system and browser (from the user agent), the referring website, the preferred language, and whether the visit came from a QR code.
- To count unique visitors we compute a one-way hash of the IP address and user agent, salted with a secret that changes every day. The hash can't be turned back into an IP address and can't link the same visitor across days. It is deleted after two days.
- Individual click records are deleted after 30 days. Aggregated counts are kept for as long as the link owner's plan allows: 30 days on Free, 1 year on Pro and 3 years on Business.
People with a Pely account
- Your email address, your name and avatar if you provide them or sign in with GitHub or Google, and the public keys of your passkeys. We never see your passkey's private key.
- The links, tags, folders, domains, webhooks and API keys you create (API keys are stored only as hashes), plus an audit log of changes in your workspaces.
- Essential cookies only: one session cookie that keeps you signed in, plus short-lived cookies that protect sign-in flows. Your theme and language choices stay in your browser's local storage.
Where your data lives
Pely runs entirely on Cloudflare (Workers, D1, KV, R2, Queues and Analytics Engine), so Cloudflare processes all of the data above. If paid plans are enabled, payments are handled by Stripe and we never see your card details. Bot protection on public forms uses Cloudflare Turnstile.
Your rights
- Export: download everything tied to your account as JSON from Account settings in the dashboard.
- Delete: delete your account in the same place. Workspaces you own alone are deleted with it, including their links and statistics.
- Link owners can delete individual links at any time. Deleted links are purged after 30 days.
Abuse
To keep short links safe, we check destinations against blocklists and may disable links that point to phishing, malware or illegal content. You can report a link at any time.