Privacy Policy
Last updated: September 11, 2026
Thank you for visiting sssh.red ("us", "we", or "our"). This Privacy Policy explains how information is processed when you use sssh.red (the "Site"). No account is required to create a short link.
Information We Process
When you create a short link, we store the submitted destination URL, generated short code, creation and expiration times, link status, an aggregate redirect count, the time of the most recent successful redirect, and limited safety-check metadata. We do not include the creator's raw IP address in the short-link record.
The redirect count increases when the service successfully handles a GET request for the short URL, including a visit made by scanning its QR code. It is a request count, not a count of unique people. Repeated visits, browser prefetching, security scanners, and automated traffic may each increase it. HEAD requests used for availability checks do not increase the count.
If you contact us, you may choose to provide your name, email address, subject, and message. If you report a link, we store the reported URL and the reason you selected.
Cloudflare and Amazon Web Services process limited network and request information, which can include an IP address, user agent, request time, and security events, to deliver the Site, rate-limit requests, detect abuse, and maintain operational security. This information may appear temporarily in infrastructure and security logs, but it is not added to the public link or short-link record.
Routine CloudFront and Amazon S3 network logs are configured to expire after three days. A limited incident-preservation copy may be retained longer when needed to investigate abuse, document remediation, or meet legal obligations, then deleted when it is no longer needed. The creator's raw IP address is not attached to a short-link record. Where rate limiting is used, network identifiers are transformed with a keyed HMAC and retained only briefly rather than stored as raw IP addresses in the link database.
The link-creation and Help forms use Cloudflare Turnstile to distinguish people from automated traffic. Turnstile processes browser and device signals and returns a verification result; it does not receive the URL entered in the form. For details, see Cloudflare's Turnstile Privacy Addendum.
Cloudflare Web Analytics is used to understand aggregate site traffic and performance. It processes information such as page path, referrer, approximate country, browser, operating system, device type, and page-performance measurements. Cloudflare states that Web Analytics does not track individual visitors across its customers' websites. Analytics information is not added to a short-link record. For details, see Cloudflare's Web Analytics data documentation.
For threat screening, the full destination URL submitted to the link-creation form is sent to Google Web Risk. Do not shorten private URLs or URLs containing access tokens, password-reset tokens, signed query strings, or other secrets.
Short URLs and their QR codes are public and may be guessed or discovered. Anyone who knows a short URL can use it to reach the destination. A generated QR image contains the public short URL and is stored with that link in Amazon Web Services until it is removed through expiration or another cleanup process. Do not use a short URL as a password or access control.
The Site stores a recent-links list in your browser's local storage. See our Browser Storage Policy for more information.
How We Use Your Information
We may use the information we collect for various purposes, including:
- To provide and maintain our website;
- To create, operate, expire, block, and remove short links;
- To screen destinations and prevent phishing, malware, spam, fraud, and other abuse;
- To enforce rate limits and protect service availability;
- To respond to your inquiries, questions, and comments;
- To detect, prevent, and address technical issues;
- To comply with legal obligations.
Disclosure of Your Information
We disclose information only as needed for the following purposes:
- To Cloudflare and Amazon Web Services, which help deliver and secure the Site;
- To Google Web Risk, which screens the full submitted destination URL for known threats;
- To comply with legal obligations or protect our rights;
- With your consent.
Retention and Your Choices
Short links are scheduled to expire one year after creation. Associated redirect and QR objects are removed through automated or administrative cleanup, which may not occur at the exact expiration time. Browser-stored recent-link history remains on your device until you remove it through the Site or browser settings. Reports and contact messages are scheduled for automatic deletion 90 days after submission, although DynamoDB cleanup may occur later. Security logs are kept only as long as reasonably needed for abuse prevention, operational security, and legal obligations. You can contact us through the Help page with a privacy or deletion request.
Data Security
We strive to implement appropriate security measures to protect against unauthorized access to or alteration of your personal information. However, please be aware that no method of transmission over the internet or electronic storage is 100% secure.
Links to Other Websites
Our website may contain links to third-party websites that are not owned or controlled by us. We are not responsible for the privacy practices or content of these websites. We encourage you to review the privacy policies of any third-party websites you visit.
Changes to this Privacy Policy
We reserve the right to update or change our Privacy Policy at any time. Any changes will be effective immediately upon posting the updated Privacy Policy on this page.
Contact Us
If you have any questions or concerns about our Privacy Policy, please contact us via the Help page.