shady.link

Short-lived by default. Less suspicious by design.

Link utility / isolated service

Make a shorter
shady link.

Every destination is checked against a known-threat reputation service before creation. A clean result is not a guarantee of safety.

Lifetime

Before you submit

The complete destination is sent to Google Web Risk for reputation checking. Do not submit URLs containing credentials, reset tokens, signatures, or other private query data.

Data handling

Minimal by design.

We do not collect click analytics or retain redirect request logs. Raw IP addresses are not stored. A keyed daily abuse fingerprint is retained for no more than two days.

Link records are retained while needed to operate the link and for no more than 30 days after expiration or revocation. Daily abuse and reputation allowance counters retain only a pseudonymous fingerprint and date, or a UTC date and aggregate count, for at most two days. Reputation event hashes and privacy-minimized service error categories are retained for seven days. Abuse reports are retained for 30 days. Administrative audit records retain only a pseudonymous actor hash, operation, and timestamp for 30 days.

Persistent invocation logs and traces are disabled. Error logs contain operation categories and timestamps, never destination URLs, link codes, capabilities, authorization values, or raw IP addresses.

Distributed-state notice: Creation, expiration changes, revocation, and reputation blocking can take 60 seconds or more to become visible in every region. A revocation accepted by the control service may therefore continue redirecting briefly.