Privacy and cookies
Last updated: 2 October 2026
Who is responsible
Link for You (L4Y, l4y.es: this website and its short links) is run by JavocSoft (Javier González Serrano). You can contact us through our contact page. See also the legal notice.
What we process and why
- The links you create. The destination URL, the short link, the expiration date and the QR image (color and central image are only used to draw it; the central image is not stored apart from the QR). We need them to provide the service you ask for. Short links and QR images are public: anyone who has them can open them, so do not shorten private URLs.
- Optional link settings. A custom alias is public (it is part of the link). The password of a protected link is stored only as a one-way hash: we can not read it. To check a password, the website forwards the visitor's IP address to our API only to count the visit by country and to limit the number of attempts; it is not stored.
- Management keys. The key of each link is shown to you once. We only store a one-way hash of it, so we can not recover it. The page keeps it in memory while it is open and never stores it in your browser.
- Visit statistics of short links. When someone opens a short link we count the visit by
day, country and referring website (only its domain, for example
t.co). The country is looked up on our own server from the IP address at that moment, with a local copy of the GeoLite2 database (no third party receives the address); the IP address is not stored with the statistics. Visits are only counted as totals per day, country and website: we do not keep data about each visitor. Link previews made by messaging apps and social networks are not counted. Only the owner of the link (with its key) can see them. Legal basis: our legitimate interest in offering statistics to link owners. - Abuse reports. If you report a link, we store the link, the reason, the details you write and, only if you give it, your email, to handle the report and contact you about it. Your IP address is not stored with the report. The person in charge is notified through a private channel with the link, the reason and your details, never your email. Legal basis: our legitimate interest in keeping the service free of abuse. Reports are kept for one year after they are handled.
- Unsafe destinations. When a link is created or reported, and again every day while it is active, its destination URL is checked with Google Safe Browsing to detect known phishing and malware sites; links found unsafe are disabled. Google receives the URL to check, never who created the link. Legal basis: our legitimate interest in keeping the service safe.
- Security. To prevent abuse, the servers limit the number of requests per IP address and may keep technical logs (IP address, date, requested address) for the time needed for security purposes. Legal basis: legitimate interest in keeping the service secure.
- Analytics, only if you accept. With your consent we use Google Analytics to count visits to this website (pages, device and approximate location). Legal basis: your consent, which you can withdraw at any time. Google may process this data outside the European Economic Area under the safeguards of the EU-US Data Privacy Framework.
We do not sell personal data nor use it for advertising.
How long we keep it
Links are kept until the owner deletes them with their key. A link may also be disabled if it is used for illegal purposes (see the legal notice). Visit statistics are deleted together with the link, and in any case after 400 days. Analytics data is kept by Google for the period configured in the account (14 months at most).
Cookies and similar technologies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
l4y-consent (browser storage) | L4Y | Remembers your cookie choice. Necessary. | Until you clear your browser data |
_ga, _ga_* | Google Analytics | Distinguish visitors and sessions. Only if you accept. As the website and the short links share the domain l4y.es, your browser also sends them when you open a short link; the service does not read them. | Up to 2 years |
If you install the app, your browser also keeps a copy of the page files (not personal data) to start faster. You can change your choice at any time:
Third party data
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Your rights
You can ask for access, rectification, erasure, restriction, objection and portability of your data through our contact page. Note that we can not identify the owner of a link without its key. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).