Features
Minting a slug is cheap. Keeping codes unique, destinations safe, and clicks recorded is the work.
Safe destination
http and https only. javascript:, data: and file: are rejected. Hosts cannot contain spaces. Missing scheme becomes https.
Collision-free slugs
Alphabet skips 0/O/1/I/l. Reserved paths cannot be slugs. A taken name returns a clear error.
Pause / delete
A paused link returns 410; the slug is not handed to someone else. Delete removes the record and the counter.
Click log
Time, device class, referrer group. Hits older than 90 days are pruned; the lifetime total stays on the link.
Dashboard and API
Same rules on both surfaces. Forms use CSRF. API keys ship when sign-up opens. Resolution is on ggc.site.