Privacy policy

Last updated 16 September 2026. This describes what GGC stores when you use ggc.site.

What we collect

• Account. Email, display name, password hash, plan, last login. Passwords are not stored in the clear.
• Links. Slug, destination, title, active flag, lifetime click count, created/updated time.
• Clicks. Time, device class (desktop / mobile / tablet), referrer group. We do not store the raw IP on the click record. Records older than 90 days are deleted; the lifetime count remains.
• Abuse reports. Your email, the slug or URL, category, description, time, a short hash prefix of the reporter IP, and status.
• Session. A cookie named GGC for login and CSRF. It is HttpOnly and SameSite=Lax.

Why

To run redirects, show you stats, stop abuse, and keep the session you opened. We do not sell click logs or report contents.

Sharing

We share data if the law requires it, or if an abuse report needs to go to a host, registrar, or competent authority (especially CSAM). Processors that later host mail or backups will be named here when they exist.

Retention

Account data lasts while the account exists. Click detail: 90 days. Abuse reports: at least 12 months, longer if a case is open. You can ask us to delete an account once sign-up is live; we may keep a minimal record of a disabled slug that was abused.

Your rights

Depending on where you live you may ask for a copy, a correction, or deletion. Use the contact form (type “Other”) and quote the email on the account.

Children

The service is not for people under 16. We do not knowingly keep their accounts.