Tooly Links

Privacy Policy

Effective November 3, 2026

This policy explains what Tooly Links (s.tooly.fyi), a link-shortening service operated by itpro360 LLC (“we”, “us”), collects, why, who can see it and how long it is kept.

Two ways to sign in

Tooly SSO (recommended). You can continue with your Tooly account through Tooly SSO (sso.tooly.fyi), a sign-in service also operated by itpro360 LLC. Your Tooly password, authenticator app and recovery codes are handled entirely by Tooly SSO; Tooly Links never sees them. Tooly SSO has its own Privacy Policy. When you sign in this way, Tooly SSO sends Tooly Links your Tooly user ID (a random identifier called sub), email address, name, profile photo address and your security groups (which decide whether you may use Tooly Links and its admin console).

Email account. You can instead create an account just for Tooly Links. Then Tooly Links itself stores your email address, a one-way bcrypt hash of your password (never the password itself), the secret for your authenticator app, one-way hashes of your recovery codes, failed-attempt counts and lockout times, and the invite code you used. You can connect a Tooly account to an email account later; the Tooly user ID is then stored on the same record.

What we collect and why

If you have an account

• Your user record: an internal user ID; the sign-in details above for the way(s) you use; when you first and last signed in and how many times; when you agreed to these terms; your theme preference; whether you are an administrator; and whether an administrator has blocked you. Used to run the service and decide what you can access.
• Sign-in history: the time, method (Tooly or email), IP address, device (browser user-agent) and result of each sign-in to Tooly Links, shown to you on your Account page.
• Your links: each destination URL, its short name, the optional label and expiry date you set, whether it is paused, and when it was created and last changed. Used to provide the service.

When anyone opens a short link

• Click statistics for the link owner: a count of clicks per day, plus totals by referring website (domain only, such as “news.example.com”), country (from our network provider Cloudflare), device type and browser. No IP address, cookie or identifier is stored with a click. Link previews from chat apps and bots are counted separately as “previews”.

When anyone visits a page on this site

• Site analytics: daily totals of page views, unique visitors, pages viewed, referring domains, browser, operating system, device type and country. Unique visitors are counted with a one-way hash of the IP address and browser user-agent mixed with a secret that changes every day; the hash is kept only for the current day and never alongside the IP address.
• Activity and security log: for security and abuse investigation we record events such as sign-ins (with the method, and your Tooly user ID or email), first sign-ins, sign-ups, sign-outs, agreement to these terms, failed sign-in attempts and lockouts, authenticator and recovery-code changes, password changes, connecting or disconnecting a Tooly account, sign-ins with the site's emergency administrator account, access refused because of a missing group or a block (with the name, email and groups Tooly SSO sent, and a reference code shown to you), failed or invalid sign-in responses from Tooly SSO, rate-limit blocks, times the sign-in service was unreachable, link creation, changes and deletion (short name and destination domain), administrator actions, settings changes, data exports, deletions of a person's data and server errors. Each entry stores the time (UTC), the event, the account involved (if any), details, the IP address and the device (browser user-agent).
• Deleted-data records: when someone's data in Tooly Links is deleted we keep a record of whose it was (Tooly user ID and email), when, by whom, and the IP address and device used, so deletions can be audited.

Emails we send

Tooly Links sends only these emails: password reset links for email accounts (the link works once, for 60 minutes, and is stored only as a one-way hash), alerts to the site's contact address when the emergency administrator account signs in, and test emails an administrator sends from the console. There is no newsletter, and no link or open tracking. Each email sent or failed is recorded in the activity log (recipient, type and service used, never the message or its links). Email is delivered through our own mail relay on the same server, which hands it to SMTP2GO or Amazon Web Services (Amazon SES) as email processors; an administrator may also send directly through SMTP2GO or Amazon SES.

Cookies and browser storage

We use only strictly necessary storage, so there is no cookie banner:

• tl_sid: a session cookie that keeps you signed in (HttpOnly, Secure; lasts at most 12 hours, or 1 hour for the emergency administrator account).
• tl_auth: a short-lived cookie (10 minutes) that links your browser to a sign-in in progress, so the response from Tooly SSO can be checked.
• tl_csrf: a security cookie that protects forms against cross-site request forgery.
• toolylinks-theme in your browser's local storage: remembers whether you chose the light, dark or automatic theme. Signed-in users' choice is also saved on their user record so it follows them to other devices.

Tooly SSO sets its own cookies when you sign in there; see its Privacy Policy. We do not use advertising or third-party analytics, and no tracking cookies.

Who can see your information

• You can see your links, their statistics and your sign-in history.
• Anyone with a short link can open it and see its destination (for example by adding + to the link).
• Tooly Links administrators can see all accounts (name, email, photo, sign-in type, Tooly groups, first and last sign-in, lock and authenticator status, never passwords or secrets), all links and their destinations, the activity log and site analytics, to run and protect the service.
• Tooly SSO (itpro360 LLC) knows when you continue with Tooly into Tooly Links.
• SMTP2GO and Amazon SES deliver the emails listed above, through our mail relay.
• Cloudflare carries traffic to the site as our network provider and processes requests (including IP addresses) on our behalf.
• Authorities if we are legally required to share information.

We do not sell or rent personal information.

Requests your browser makes to other sites

If you use Tooly SSO, signed-in pages load your profile photo from Tooly SSO (sso.tooly.fyi), and signing in and out sends your browser to Tooly SSO and back. Nothing else is loaded from other websites. When a visitor follows a short link, their browser goes to the destination website, which has its own privacy practices; we send it no referrer information from this site.

How long we keep things

• Your user record and links: until you delete your account here or an administrator deletes it. Deleting your account deletes your links and their statistics.
• Sign-in history on your account: 30 days.
• Per-link daily click counts: 365 days; per-link totals by referrer, country, device and browser: as long as the link exists.
• Site analytics daily totals: about 120 days. Visitor hashes: the current day only.
• Activity and security log, and deleted-data records: 12 months.
• Daily backups of the data: 14 days.
• Sessions: until you sign out, or 12 hours.

Your rights and choices

• Access and export: download your user record, sign-in history, links and their statistics from the Account page.
• Correct: edit or delete any link at any time. Change your email account's password on the Account page; your Tooly name, email and photo are changed at Tooly SSO.
• Delete: delete your Tooly Links account and all its data yourself on the Account page. To delete your Tooly account itself, use Tooly SSO. Copies in backups disappear within 14 days.
• For anything else, including questions about the log or analytics, contact us (below). Depending on where you live (for example California or the EU/UK), you may have additional rights such as to know, delete or object; we will honor them as required by law.

Security

Every way in requires an authenticator app: Tooly SSO requires one for every Tooly account, and email accounts here must set one up. Passwords are stored as bcrypt hashes, repeated failed sign-ins lock an account for 15 minutes, Tooly sign-in responses are verified (signature, issuer, audience, expiry and one-time values), connections are encrypted with HTTPS, sessions expire after 12 hours, and pages use strict security headers. No method is perfectly secure, and we cannot guarantee absolute security.

Where data is stored

On a server operated by itpro360 LLC in the United States.

Children

The service is not meant for anyone under 16, and they may not use it.

Changes

If we change this policy we will update the effective date above, note the change in the changelog, and ask you to agree again at your next sign-in.

Contact

For privacy questions, data requests, or to report an abusive link, use the contact details published by itpro360 LLC (a contact email has not been set on this site yet).