Who we are
MiniSnip, at minisnip.com, is operated by Mini Snip ("MiniSnip", "we", "us"). We are responsible for the personal data described in this policy. You can reach us at support@minisnip.com.
This policy covers two groups of people:
- Account holders: people who sign up to create short links, link-in-bio pages, QR codes and custom domains.
- Visitors: people who open a MiniSnip short link, scan a MiniSnip QR code, view a link-in-bio page or browse minisnip.com.
Information from account holders
- Account details. Your name, email address and profile picture. Sign-in is handled by our authentication provider, Clerk. We never see or store your password.
- What you create. Your links and their destinations, titles, notes and tags; link settings such as expiry dates, click limits, country and device targeting and A/B variants; custom domains; link-in-bio pages; retargeting pixel IDs; webhook URLs; and team invitations, including the email addresses of the people you invite.
- Secrets. API keys and link passwords are stored only as one-way hashes.
- Billing. Your plan, subscription status and renewal date, and the customer and subscription references from our payment provider. Card details are entered on the payment provider's page and never reach our servers. If you pay with cryptocurrency, NOWPayments processes the payment and we receive its ID, amount, coin and status. Cryptocurrency transactions are recorded on public blockchains by design.
- Support. The messages you send us and our replies.
Information collected when someone opens a short link
Each time a short link, QR code or link-in-bio button is opened, we record:
- the date and time;
- an approximate location (country, region and city), worked out from the IP address;
- the device type, operating system and browser, and the browser's user-agent text;
- the referring website or app, and the traffic source, such as Instagram, WhatsApp or a QR code;
- whether the visit came from a bot, crawler or link-preview service, and why we think so. For visits from servers this can include the server's public hostname;
- which A/B variant was shown, if the link has variants.
We do not store IP addresses. We keep only a salted one-way hash, so repeat visits can be recognised without identifying anyone. We do not use cookies to follow visitors and we do not build profiles of people across links.
Location normally comes from our hosting provider's network data. If that is missing, we may look the IP address up with an IP geolocation service.
Retargeting pixels added by link owners
Account holders can attach advertising and analytics pixels to their links, including the Meta Pixel, Google Analytics, Google Ads, Google Tag Manager, TikTok, LinkedIn, X, Pinterest and Snapchat. When you open such a link, a short intermediate page loads those pixels and then sends you on to the destination. Pixels are never loaded for bots.
Those companies may set cookies and collect information under their own privacy policies. The link owner decides to use them and is responsible for any notice or consent their audience requires.
Links created without an account
You can shorten a link on our home page without signing up. To prevent abuse, we use your IP address to limit how many links one network can create in an hour; that counter expires automatically. These links stop working after 7 days.
Cookies
MiniSnip's own pages use no advertising cookies. We count page views with Vercel Web Analytics, which sets no cookies, stores no IP addresses and drops the query part of each address. We use only these cookies:
| Cookie | Why |
|---|---|
| Sign-in cookies set by Clerk | Keep you signed in to the dashboard. Set only when you sign in. |
tz |
Remembers your time zone so dashboard dates show in your local time. |
| Workspace | Remembers which team workspace you last opened. |
| Link password | After you enter the password for a protected link, remembers it so you are not asked again. |
ms_did |
A random ID set on the sign-up and dashboard pages, so each person can claim a sign-up offer only once. |
ms_ref |
Set when you open a friend's invite link, so both of you get the invite reward when you sign up. Expires after 30 days. |
Pixels added by link owners can set their own cookies, as described above.
How we use information
- To run MiniSnip: redirect links, show link owners their analytics, host link-in-bio pages and serve custom domains.
- To keep the service safe: detect bots, prevent spam, phishing and malware, and enforce our Terms of Service.
- To manage plans, payments and refunds.
- To answer your questions and requests.
- To understand and improve MiniSnip, using aggregated usage information.
We do not sell personal information, and we do not use it to show you advertising.
Legal bases (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we rely on: performance of our contract with you, to provide your account; our legitimate interests, to give link owners analytics and to keep the service secure; legal obligations, for tax and accounting records; and consent, where the law requires it.
Who we share information with
We use service providers that process data for us under contract:
| Provider | Purpose |
|---|---|
| Vercel | Hosting and delivering the website and short links; cookieless page-view counts |
| Prisma (Prisma Postgres) | Database |
| Upstash | Caching and rate limiting |
| Clerk | Sign-in and account management |
| Dodo Payments | Card payments, subscriptions and refunds, as merchant of record |
| NOWPayments | Cryptocurrency payments |
| Resend | Sending account emails: welcome, invitations, receipts, reminders and alerts |
| Forward Email | Receiving email sent to our @minisnip.com addresses and passing it to our inbox |
| IP geolocation service | Location lookup, only when our host provides none |
Where our payment provider acts as merchant of record, it is the seller of your subscription and handles your payment details under its own privacy policy.
We also share information:
- With link owners: the visit details listed above for their own links. Link owners never see IP addresses.
- With webhook endpoints that an account holder sets up, which receive details of their links and clicks.
- With your team, if you invite people into your workspace.
- Publicly, when you choose to: link-in-bio pages, and stats pages you make public.
- When the law requires it, or to protect the rights, property or safety of MiniSnip, our users or others.
- In a business transfer, such as a merger or sale, under this policy's protections.
International transfers
Our providers may process data in the United States and other countries outside your own. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.
How long we keep information
- Account details and content: while your account is open. When your account is deleted, your links, pages, domains, pixels, webhooks and all of their click records are deleted with it.
- Click records: for as long as the link exists. Deleting a link deletes its click records. Your plan controls how much history the dashboard shows.
- Anonymous rate-limit counters: about one hour.
- Billing records: as long as tax and accounting law requires.
Your rights
Depending on where you live, including under the GDPR, UK GDPR and California law, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it;
- delete it, or delete your account;
- restrict or object to how we use it, or withdraw consent you have given;
- nominate someone to exercise these rights for you, where the law provides for it.
You can export your links and click data from the dashboard at any time. For anything else, email support@minisnip.com. We may ask you to confirm your identity. You can also complain to your local data protection authority.
If you opened someone's short link, we cannot tell which visits were yours, because we do not store IP addresses. For questions about a link, contact its owner; to report a harmful link, contact us.
Security
All traffic uses HTTPS. API keys, link passwords and IP addresses are stored as one-way hashes, and access to production systems is restricted. No system is perfectly secure, so please keep your sign-in details and API keys private.
Children
MiniSnip accounts are for people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email us and we will delete it.
Changes to this policy
We will post any change on this page and update the date at the top. If a change is significant, we will also tell account holders in the dashboard or by email before it takes effect.
Contact and grievances
For privacy questions, requests or complaints, email support@minisnip.com.