Privacy

Hosting and network

The site runs on Cloudflare Workers. As the host and content delivery network, Cloudflare necessarily sees each visitor’s IP address and request details in order to deliver pages and protect the service. Workers invocation logs are turned off, and the site’s own logs are structured events that contain no IP addresses, payloads, URLs or tokens.

Creating a destination or a report

• Cloudflare Turnstile checks that a person is creating the record. It runs in your browser on the home page and the report page only, and Cloudflare processes the signals it needs for that check. The site verifies the token on its server and doesn’t keep it.
• Rate limiting uses your IP address as a short-lived key in Cloudflare’s rate limiter, for one minute. It is not written to the database.
• Cloudflare URL Scanner receives every short link’s destination for an unlisted safety scan before the link activates. For a short link that expires to its site’s home page, that home page is scanned too. Scan reports are held by Cloudflare under its own terms.

What is stored, and for how long

• Destinations. Hosted text, short link destinations, the chosen style and expiry, the safety status and scan identifiers are stored in a Cloudflare D1 database. They are not linked to who created them.
• Retirement after 24 months. A record is kept for up to 24 months; in limited cases the operator may extend this, with a logged reason. A scheduled retirement then erases the text or destination and keeps only the reserved address and a retirement marker, so the address is never reused. An early expiry stops a record working sooner but doesn’t free its address.
• Abuse reports store the reported address, the reason and any details you write. No IP address or other detail about the reporter is stored, and the details are erased after 24 months.
• SDK telemetry is stored only as daily aggregate counts, with no IP addresses, and deleted after 400 days. See telemetry.

The renderer and scanner

The renderer and scanner run the CKey core in your browser with telemetry turned off. What you type, and what your camera sees, are not sent to this site. If you open the renderer from a link that contains ?data=, that link, like any address you visit, is part of the request Cloudflare delivers. Link status sends only the address you check.

What the site never does

• No advertising, analytics or tracking scripts, and no cookies set by the site. Turnstile may use its own browser storage to do its check.
• Hosted text pages contain only the text: no site scripts, navigation or tracking.
• No sale or sharing of data beyond the processor named here.

Questions and requests

For privacy questions, open an issue on the CKey project on GitHub. For security reports, use a private security advisory. To report a harmful link, use the report form.