Privacy
Updated: October 23, 2026.
This policy explains how Acort handles information when you create links, generate QR codes, and sign in. Acort is an independent project. Contact: finanzasconiartificial@gmail.com.
Information we use
- Links: we store the original destination, short code, status, dates, and visit count. When you sign in, new links are associated with your account.
- Google account: we receive your Google identifier, name, and email to identify your account. We do not receive your password or request access to Gmail, Drive, or contacts. Tokens received during sign-in are used for that process and are not stored as credentials for accessing other Google services.
- Security: we process IP addresses to limit use. We store an HMAC-derived identifier with daily periods for link creation and hourly periods for reports and sign-in attempts. When signed in, the creation allowance is tied to your account. These identifiers are not used for personalized advertising.
- Reports: we store the link code, description of the problem, and submission date to review potential abuse.
How we use information
To redirect links, generate QR codes, show your saved links, maintain your session, limit automation, and handle questions and reports. Visit counts may include bots, previews, and repeat visits; they do not necessarily represent unique people.
Cookies and session duration
A secure cookie that JavaScript cannot access maintains your session for up to 7 days. A temporary sign-in cookie lasts up to 10 minutes. A separate temporary language cookie, also lasting up to 10 minutes, preserves your chosen language during Google sign-in; it is cleared when that process finishes. Public language pages can be opened without this cookie. Signing out invalidates the current session but does not delete your account or links. You can also delete cookies in your browser.
Providers and analytics
Cloudflare provides hosting, the database, and Turnstile form checks. These services may process technical data and connection logs to operate and prevent abuse. Google handles sign-in under its own terms. These providers may process information in other countries.
The homepage uses Cloudflare Web Analytics to measure page visits and performance. This is separate from each short link visit counter. We do not send your stored account name or email to this analytics service.
We do not sell your personal information or data received from Google. We do not use Google account data for personalized ads or to train AI models. The administrator can access information needed to operate and protect the service. Information may also be disclosed when required by an applicable obligation or to respond to a valid authority request.
Retention
We retain accounts and links while they remain in the service, unless removed after a verified request, abuse, or project closure. Reports are retained for review. If you edit a link with Pro, we retain the previous and new destinations, date, and account responsible for the change to handle incidents. We also store Pro trial expiration dates.
During PayPal Sandbox testing, we store technical identifiers for the application, product, plan, subscription, associated Acort account, subscription status, payment identifiers, and confirmed access expiration. We do not store PayPal passwords, card numbers, or the Sandbox buyer name or email returned in responses. Authorization takes place on PayPal. Refunded payment identifiers are retained to prevent duplicate notifications from restoring access. Tests use simulated money. For verified notifications, we store the event identifier, type, resource, and receipt date, without retaining the full notification body. These records are considered when handling deletion requests; any necessary retention will be explained.
Sessions expire after 7 days and sign-in attempts after 10 minutes. Expired sign-in and session records are cleaned up when new sign-ins begin. Temporary usage-limit records expire and are removed when new requests arrive. Recovery copies and provider technical logs may retain information for their own retention periods.
Your requests
Email finanzasconiartificial@gmail.com to access, correct, or request deletion of your information and account, or to raise a privacy concern. Include the email associated with Acort and relevant links, without passwords or secrets. We will verify ownership before making changes. If your links are deleted, their short URLs and QR codes will stop working. Any retention required by an applicable obligation will be explained when processing your request.
You can revoke Acort access in your Google account connections. This does not automatically delete data already stored in Acort; contact the administrator to request deletion.
Public links and destination websites
Short links and QR codes can be shared: anyone who has one can open its destination. Avoid shortening private URLs or those containing passwords or access tokens. Opening a link takes you away from Acort, where the destination website policies apply.
Advertising and changes
This version does not load third-party advertising network ads. Before adding them, we will update this information and any necessary controls. Changes to data handling and the update date will be published here.