Legal

Privacy Policy

Data controller: DNH, tax ID L81426021B, Tirana, Albania

Effective date: May 11, 2026

This Privacy Policy explains how DNH ("DNH", "we", "us", "our"), tax ID L81426021B, based in Tirana, Albania, collects, uses, and protects information when you use our URL shortening, link analytics, QR code, and bio page services available at reslug.com (the "Service"). ReSlug is a product owned and operated by DNH, which is the data controller for the personal data described in this policy.

1. Information we collect

We collect the following categories of information:

  • Account information. When you create an account we collect your name, email address, and a hashed password. If you sign in with Google or GitHub, we receive your name, email, and avatar URL from that provider.
  • Content you create. The destination URLs you shorten, custom slugs, tags, bio page content, QR code configuration, and the metadata you attach (titles, UTM parameters, expiration dates, password protection, and scheduling).
  • Click and visitor data. When someone clicks one of your short links or visits your bio page, we record the timestamp, approximate location (country and region) derived from IP, referrer, user agent, device type, and browser. We do not store full IP addresses after this lookup.
  • Billing information. Payments are processed by Paddle. We do not store full card details. We receive a transaction identifier, the plan you purchased, your billing country, and the last four digits of your payment method.
  • Communications. Messages you send through our feedback form or to [email protected].

2. How we use information

  • To operate the Service, redirect short links, and render bio pages.
  • To provide analytics dashboards to the link owner.
  • To detect abuse, prevent fraud, and enforce our Terms.
  • To send transactional emails (confirmation, password reset, billing).
  • To improve features and respond to support requests.

We do not sell personal information, and we do not use your link content or analytics data to train third-party advertising profiles.

3. Cookies and local storage

We use a small number of first-party cookies and local-storage entries that are strictly necessary to keep you signed in, remember your theme preference, and remember recently used QR code logos. We do not use third-party advertising cookies.

4. Sharing with third parties

We share information only with the processors listed below, and only as needed to run the Service:

  • Microsoft Azure - hosting and database.
  • Paddle - subscription billing and tax handling.
  • Google - optional sign-in.
  • GitHub - optional sign-in.
  • Email delivery providers - sending transactional email.

We will disclose information when required by law, subpoena, or other valid legal request, and we will notify the affected customer when we are permitted to do so.

5. Data retention

  • Account data is retained for as long as your account is active.
  • Click analytics are retained for the period associated with your plan: 30 days on Free and 12 months on Pro. Older events are deleted from the analytics store.
  • Deleted links, bio pages, and QR codes are removed from active storage within 30 days.
  • Billing records may be retained longer where required by tax and accounting law.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights from your account settings or by emailing [email protected]. We respond within 30 days.

7. International transfers

DNH operates the Service from Tirana, Albania. The Service is hosted on Microsoft Azure infrastructure located in the European Union. If you access the Service from outside the EU, your information will be transferred to and processed in the EU under appropriate safeguards.

8. Security

We use encryption in transit (HTTPS) and at rest, password hashing (Argon2), short-lived access tokens, and least-privilege access controls. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 13 and we do not knowingly collect personal information from children. If you believe a child has used the Service, contact [email protected].

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-app notice at least 14 days before they take effect.

11. Contact

Questions about this policy can be sent to [email protected] or [email protected]. The data controller is DNH, tax ID L81426021B, Tirana, Albania.