1. Information We Collect
At KutLat, we collect only the information necessary to provide and operate our link shortening, geographic targeting, and monetization services:
- Account Information: When registering or logging in (via email and password or via Google authentication), we store your name, email address, preferred language, profile picture, and identity provider ID (when applicable).
- Link and Advertising Configuration Data: We store shortened original URLs, short codes (automatic or custom), monetization mode (Link Gate or Direct Flow), ad groups, configured Direct Links, and country-based geographic targeting flows (Flows).
- Subscription and Payment Information: When you purchase a Premium plan (Hobby or Pro), we record the selected plan, amount, currency, payment method used (such as USDT over BEP20, TRC20, or ERC20 networks), transaction reference or hash, and subscription start and expiration dates. KutLat does not collect or store private keys or bank card details.
- Traffic and Visit Metrics: When a shortened link is visited, we record technical event data (Link Gate view, continue click, or Direct Flow redirect), including IP address, country (resolved locally via MaxMind GeoLite2 Country database), browser language, referring source or domain (referrer), device type, operating system, browser, and User-Agent.
2. How We Use and Retain Information
The collected information is used exclusively for the following operational purposes under strict retention policies:
- To manage your account, enforce monthly plan quotas (Free, Hobby, or Pro), and keep your shortened links operational.
- To process redirects (Link Gate and Direct Flow) and apply real-time country-based geographic targeting flows (Flows) configured by the link owner.
- To generate statistical reports and traffic analytics in the user dashboard.
- Automatic Metrics Retention: Detailed traffic and visit logs (trackings) are retained for a maximum of 20 days for your recent analytics and are automatically deleted by the system after that period.
- To send essential transactional emails, including account verification, password resets, and automated Premium subscription expiration reminders (sent during the 5 days prior to the expiration date).
- To detect and prevent automated abuse, bot traffic, or service violations using verification tools such as Cloudflare Turnstile.
3. Google Integration (Google User Data)
When you log in through Google, KutLat only requests basic access to your public profile and email address (openId, profile, email) solely to authenticate your identity and create or link your account. KutLat does not share, sell, or use user data obtained through Google APIs for third-party advertising or any purpose other than user authentication, strictly adhering to the Google API Services User Data Policy, including the Limited Use requirements.
4. Third-Party Ad Networks and External Services
Our platform allows users to integrate their own third-party advertising Direct Links (such as Adsterra, Monetag, Evadav, among others), as well as protect public forms using Cloudflare Turnstile. KutLat does not control the privacy policies or tracking technologies employed by destination websites or external advertising networks configured by link creators. We encourage you to review the privacy policies of those third-party providers.
5. Cookies and Local Storage
We use technical cookies, authentication tokens, and browser local storage (localStorage) strictly necessary to keep you logged into the panel, remember your language and visual theme preferences, and protect the platform against CSRF attacks. We do not use third-party advertising cookies to track registered users inside our panel.
6. Data Security
We implement technical and organizational measures to safeguard your personal information, including encrypted communications via HTTPS/SSL, passwords protected with secure hashing algorithms (bcrypt), revocable access tokens, and restricted database access.
7. User Rights and Data Deletion
You can update your profile information, modify, or delete your short links (which also deletes their associated metrics and releases the short code) from your dashboard at any time. You also have the right to request the complete deletion of your account and personal data by contacting our support email.
8. Contact Us
If you have any questions or concerns regarding this Privacy Policy or how your personal information is handled, you can reach out to us at: [email protected]