Who is responsible

kuody.com is operated by Belbrd LLC.

Each code belongs to the organization that made it. It chooses where the code leads and sees its statistics; kuody.com runs the service for it and protects the service from abuse.

What a scan records

  • the date and time;
  • the approximate country and city;
  • the device, its system and the browser, as your browser's user agent names them;
  • the referring page, when your browser sends it;
  • whether the visit looks automated;
  • a visitor key, to count the different visitors of a day. It is computed with a secret made anew every day and deleted within days, after which nobody can trace the key back to you.

Opening a code never asks for your name, your phone number or your location.

Your IP address is not stored

Your IP address is used only at the moment you open the link: to find the approximate place, to tell automated visits from people, to compute the visitor key, and to limit repeated requests (a counter keeps a code made from it, never the address, for at most 15 minutes, or until midnight for a code with a daily limit). Then it is dropped. It is not written to a scan record, an export or a log.

Why

To show the organization that owns a code how it is used, and to protect the service and its visitors from abuse. The basis is the legitimate interest of running and protecting the service. No sensitive data is processed.

Forms and tools on a code's page

What you write in a form on a code's page is kept only if you send it, and goes to the organization that owns the code, until it deletes it.

An organization may add measurement or advertising tools (from Google, Meta, TikTok or Snap) to its page. The page names them at its foot, and that organization answers for them. They are never loaded when a code only sends you on to another site, nor on a password page.

Cookies

Opening a code that sends you on or shows a page sets no cookie. A code protected by a password, and a form's page, set what sending the form safely needs. The dashboard sets what your sign-in and its protection need, and keeps the language you read in. Nothing else.

How long it is kept

Each scan record is deleted after at most 396 days; the organization may choose less.

Daily totals hold nothing about a single visit and stay while the code exists. A deleted code's records go when it leaves the trash, 30 days later.

Who else handles it

Only what each part of the service needs:

  • our hosting, in Germany: the server, the database and the uploaded files;
  • the network in front of the site, which every request passes through, usually in its data centre nearest to you; on the sign-up page and a few forms it also checks that a person, not a program, is sending;
  • an error report service, which receives what failed, without your address or anything you typed;
  • encrypted nightly backups, which the company that stores them cannot read;
  • the service that sends our e-mails, to account holders only;
  • mail you write to Kuody's addresses: it passes through the same network and is kept by the mail service we read it with;
  • a service of lists of harmful links, with which the destinations of editable codes are checked, with nothing about you or your visitors;
  • the payment company that sells the paid plans: you pay on its page, and your card goes to it, never to us;
  • Google, only if you choose to sign in with it: it tells us your name, your e-mail address and your account's identifier there;
  • Apple, only if you choose to sign in with it: it tells us your account's identifier and your e-mail address, or a relay address if you hide yours;

If you have an account

  • Your name, e-mail address, language and time zone, and your password in a form that cannot be read back.
  • Your sign-ins, with their time and browser, while they last.
  • The changes you make, with your name, for 24 months, and a code made from your IP address, cleared after 90 days, to look into a break-in.
  • The version of the terms you accepted, and when.
  • An address our e-mail bounced from, or whose reader marked it as spam, so as not to write to it again.
  • Your plan, its dates and the payment company's identifiers. Never a card number.

Until the account is opened we keep nothing: what you asked travels in the link we send, which works for 3 days. You can download your data and delete your account from your account page.

When you ask us for help

A support request keeps what you wrote and attached, our answers, the address we reply to, and the page you came from with your browser's name, to understand the problem. Pictures you attach are drawn again, so nothing hidden in them is kept. A request is deleted 24 months after it closes, and with your account. Only you and our support team can read it, and your requests are in your data download.

This site and its free tools

The scanner, the pre-print check and the size calculator run in your browser: nothing they see is sent to us. We count visits to the site's own pages with our own analytics tool, which sets no cookie and does not identify you, never on the pages that codes open, and not when your browser asks not to be tracked.

Your rights

You may ask how your data is processed, to see and copy it, to correct it, and to delete it. We answer within 30 days. A scan record holds no name, so tell us the short link, the date and the device you used.

Write to [email protected].

You may also complain to the data protection authority of the country where you live.