This policy explains what personal data MouseURL handles, why, and what you can ask of us. MouseURL is operated by an independent sole proprietor, who is responsible for this data. Contact: support@mouseurl.com.
If you have an account
We keep your name, your email address, and either a hash of your password or the link to your Google account if you sign in with Google. We also keep whether your email address is verified, the workspaces you belong to, and your role in each.
We use this to run your account, to send the emails the service needs (address verification, password reset, invitations), and to keep the service safe.
What you create
Your links, their destinations and rules, bio pages and their content, Shop products and the images you upload, tags, and custom domains are stored to provide the service. Uploaded images are stored in Cloudflare R2.
Visitors of short links and bio pages
When someone opens a short link or a bio page, we record the event at the edge before the redirect:
- the country, from Cloudflare's view of the connection;
- the device type, browser, and operating system, from the user agent;
- the referring website's hostname, without its path or query, and a one-way hash of the full referring address;
- a visitor id that changes every day and is made from a secret salt, so the same visitor can be counted once a day without being followed across days;
- whether the visit looks like a bot, and the time.
We never store the visitor's IP address. Workspace members see these numbers in the dashboard. The visitor's destination site receives the visitor as usual, under its own privacy policy.
The waitlist
If you join the waitlist we keep your email address, the country your request came from, which form you used, and the time. We use it only to send one email when sign-up opens. We do not store your IP address. Ask us and we remove it at once.
Keeping the service safe
To limit abuse we count sign-in attempts, sign-ups, waitlist sign-ups, and new links. The counts are stored under a keyed hash of the IP address, email address, or workspace, never the raw value, and deleted once their time window has passed.
Destinations of links and bio pages are checked with Google Web Risk, which receives the URL being checked.
Who processes data for us
We use these services to run MouseURL. Each processes data only to provide its part of the service:
- Vercel: hosting of the website and the dashboard.
- Neon: the database.
- Cloudflare: redirects, bio pages, DNS for custom domains, click analytics, and storage of uploaded images.
- Resend: sending our emails.
- Google: sign-in with Google, and Web Risk checks of destinations.
- OpenStreetMap Nominatim: the address search in the bio editor's map block, which receives the text you search for.
- Paddle and Midtrans: payments, once billing opens.
Where data is processed
These services run in the United States, the European Union, and Cloudflare's data centers around the world, so your data may be processed outside the country you live in. We choose providers that protect data with appropriate safeguards.
How long we keep it
- Click and view analytics: 90 days, and one year on Cheese. Your plan sets how far back the dashboard shows them: 30 days on Nibble, 60 on Whisker, 90 on Scurry.
- Your account and what you create: until you delete them or ask us to.
- Verification and password reset links: they expire after 24 hours and 1 hour.
- The waitlist: until sign-up opens and the announcement is sent, or until you ask us to remove you.
Your choices and rights
You can see and change most of your data in the dashboard and export links and analytics as CSV. Write to support@mouseurl.com to get a copy of your data, correct it, or have it deleted. We answer within 30 days. If you are not satisfied, you can complain to the data protection authority where you live.
Children
MouseURL is not meant for children under 13, and we do not knowingly collect their data.
Changes to this policy
When we change this policy in a way that matters, we email account holders before it takes effect and update the date at the top of this page.