Is Shorten.REST GDPR compliant?
Shorten.REST is engineered around GDPR principles: we do not capture end-user PII on the redirect path, click metadata captured is technical (referrer, user-agent, country), and the rights described under GDPR (access, correction, deletion, portability, objection) apply to data we hold about you as a customer. We have not yet pursued a third-party SOC 2 or ISO 27001 audit; we plan to as the customer base scales.
Where does the platform run?
The redirect tier and API run on AWS, multi-AZ. The marketing site (this site) is a static Astro build; the dashboard and API run independently.
Do you store my credit card information?
No. Billing is handled by Chargebee with Stripe as the payment processor. Your card details never touch our servers.
What are the rate limits?
Rate limits are per plan: Business plan supports 100 calls per second, Scale 300 calls per second, Enterprise 1,000 calls per second. Annual commits can negotiate higher dedicated throughput.
Do clicks count as API calls?
No. API calls are operations against the management API (creating, updating, listing links). Clicks are redirect-tier events and are unlimited on every plan.
Can I move existing custom links from another shortener?
Yes. Most teams migrate by re-pointing their CNAME to ng1.short.fyi, then bulk-importing their existing alias→destination map via the API.
Do links ever expire?
No, links do not expire on their own. Destinations remain editable for the lifetime of the account.
How many API keys can I have?
Each account can hold up to two API keys at a time. You can rotate keys without downtime.