Security throughout your use of the service
Security covers links, accounts and usage information. We combine several checks according to the available features and system settings.
URL and destination checks
The system checks URL formats, hostnames and network information, including destinations along redirect chains, to limit links to internal networks or disallowed destinations. Link status, reserved aliases and request limits also help reduce disruptive use.
Account protection
Passwords are stored as hashes. Google sign-in, passkeys, two-factor authentication and email verification are available according to system activation and settings.
Limited access to information
We use information as needed to provide the service and maintain security. Read the privacy policy for details about collection, use and disclosure.
Risk review
Checks may combine automated rules and staff review. Results can be inaccurate and destination websites can change later. Let us know if you find a problem or believe a result is incorrect.
Responsible vulnerability reporting
If you find a vulnerability, contact us with the steps and necessary details. Avoid accessing other people's data, disrupting the service or sharing information that increases risk before review and repair.
How you can help
Check website domains before signing in or paying. Do not share passwords or one-time codes, and report links with suspicious behavior.