Legal

Privacy Policy

Last Updated: 2026-01-18

This Privacy Policy explains how we collect, use, and protect your information when you use Qlink.fi and its services, including the app.qlink.fi web app, the Chrome extension, “QLink.fi - URL shortener & UTM builder” Google Sheets Add-on, the "Qlink.fi bot for Slack", and our short domains (qik.fi, qli.fi).

1. Who We Are

Qlink.fi is operated by Mirlan Dzhumagulov, based in Oulu, Finland. We comply with the General Data Protection Regulation (GDPR).

2. What Data We Collect

Link input data

URLs, UTM parameters, and settings you provide via the web app, Chrome extension, Google Sheets add-on, or the bot for Slack.

Click event data

For each short link click, we collect:

  • Timestamp of the click
  • Country (derived from IP address at the time of the click)
    We use the MaxMind GeoLite2 database (locally hosted) to determine the approximate country of visitors who click on shortened links. We do not store or share raw IP addresses; only the derived country code is retained.
  • Referrer domain (e.g., facebook.com)
  • Device (e.g., mobile, desktop; derived from device metadata at the time of the click)

We do not store full IP addresses or full referrer URLs. Click data is retained based on your subscription plan.

Bot for Slack data

When you use the bot for Slack, we may collect:

  • Slack user ID and workspace/team ID (for permission management)
  • Slash command inputs (e.g., URLs to shorten, command options)
  • Workspace-level preferences (e.g., who is allowed to create short links)
  • Bot-specific preferences (e.g., whether all workspace users can create links)
We do not access or store
  • Your personal Slack messages
  • Usernames, emails, or profiles
  • Channel content or conversations
  • Files or attachments

All Slack-related data is stored securely in EU-based servers and used only to process your bot commands. We do not use Slack data for analytics, profiling, or advertising. Slack workspace admins can request full deletion of stored settings at any time.

Usage analytics

Anonymous usage statistics used to monitor system health and performance. These do not include any personal identifiers.

Account data

Your Google email and ID are used solely for authentication and access to the Sheets add-on. We do not access or store your documents. Your API key is used to authenticate requests from the web app and Chrome extension. Slack user and workspace IDs are used to provide authenticated access to bot commands.

3. Why We Collect It

  • Generate, manage, and analyze short links
  • Display click metrics and performance reports
  • Improve the stability and usability of the Service
  • Provide customer support and protect against abuse
  • Authenticate and process user commands within Slack or Google Sheets

4. How Long We Keep Your Data

Link metadata

(original/shortened URL, total clicks): retained indefinitely

Analytics logs

(IP, timestamp, geo, etc.):

  • Free: 7 days
  • Starter: 30 days
  • Pro: 90 days
  • Business/Enterprise: 180+ days
In-app event logs

up to 60 days (anonymized only)

5. Who Has Access

No third parties have access to raw data unless legally required.

Payment data is handled securely by Paddle.com; we do not store credit card info.

We do not sell or share your data for marketing purposes.

6. Cookies and Tracking

We use only strictly necessary cookies to ensure the proper functioning and security of our website. These cookies do not collect personal information for marketing purposes.

Cookie Purpose Duration Type
csrf_token Security measure to prevent cross-site request forgery attacks. 1 month Strictly necessary
TERMLY_API_CACHE Stores cached legal policy data to improve page load performance. Persistent until cleared Strictly necessary

We do not use analytics cookies, advertising cookies, or any other non-essential tracking technologies on qlink.fi.

7. Data Security

We use industry-standard practices, including encrypted connections, access control, and secure hosting in the EU (Google Cloud).

8. Your Rights (GDPR)

You have the right to:

  • Access, correct, or delete your data
  • Object to processing or request data portability
  • Withdraw consent for optional analytics at any time

To exercise any rights, email us at mirlan@dataengineer.fi.

9. Children's Privacy

The Service is not intended for children under 13 and we do not knowingly collect data from them.

10. Data Processing Agreement (DPA)

We offer a GDPR-compliant DPA for business customers. Please contact us to request a signed copy or for integration-specific terms.

11. Changes to This Policy

We may update this policy occasionally. We will notify users through our app or site if significant changes occur.

12. Contact

Questions or concerns?

Mirlan Dzhumagulov
Address: Oulu, Finland