7.HT
Connexion / Inscription

Privacy Policy

Dernière mise à jour: 2 octobre 2026

Ce document est fourni en anglais.

This policy explains what personal data 7.HT collects, why, and what control you have over it. It covers both people who use 7.HT to create links and people who visit a 7.ht short link. 7.HT is run by an individual, who is responsible for your data as the data controller.

In short: we collect as little as we can, we do not show ads, we do not sell data, and we do not store visitors' IP addresses in our database.

1. What we collect

If you have an account:

  • your email address, and the time you signed up;
  • if you buy a paid plan: your plan, the subscription status and the order ID Waffo gives us. Your card and billing details go straight to Waffo; we never see or store them;
  • if you sign in with GitHub or Google: the verified email address and display name that the provider shares with us. We do not receive your password and do not keep the provider's access token;
  • a login session, stored as a random token in a cookie on your device and as a hashed copy in our database;
  • one-time login codes, stored only as a hash and deleted once used or after 10 minutes;
  • the links you create: destination address, short code, title, settings and change history;
  • your language preference.

When anyone visits a 7.ht short link, we record:

  • which link was visited and when;
  • whether it was a click or a QR code scan;
  • the visitor's country and city, derived from the IP address by our hosting provider;
  • the device type (mobile, desktop or tablet), operating system and browser name, derived from the browser's user agent;
  • the browser's preferred language (for example "en-US");
  • the referring website's domain name (not the full page address);
  • a visitor identifier made by hashing the IP address and user agent with a secret that changes every day. It lets us count repeated clicks within 30 seconds only once and count unique visitors per day, and cannot be reversed into an IP address.

When you try the service without an account, we store a daily hash of your IP address to enforce the limit of 3 links a day.

When you report a link, we store the link, your reason, your email address if you give it, and a salted hash of your IP address so that repeated reports from one person count only once.

2. What we do not do

  • We do not store visitors' raw IP addresses in our database.
  • We do not show ads or use advertising or cross-site tracking cookies.
  • We do not sell or rent personal data.
  • We do not build profiles of the people who visit short links.

3. How we use it

  • to provide the service: redirect visitors, show your dashboard and statistics, and send login codes (performance of our contract with you);
  • to keep the service safe: enforce limits, detect and block abusive links, and handle reports (our legitimate interest in protecting users and the service);
  • to meet legal obligations, for example responding to lawful requests.

We send you email only to sign you in and, where needed, about your account or significant changes to our terms. We do not send marketing email without your consent.

4. Service providers

We use a small number of providers to run 7.HT. They process data only on our instructions:

  • Vercel Inc. hosts the website and handles incoming requests, including the visitor IP address used to determine country;
  • Neon Inc. hosts our Postgres database;
  • our email server sends login codes;
  • Waffo Pancake, the merchant of record for paid plans, processes your payment details, billing address and email to take payments and issue invoices, under its own privacy policy;
  • GitHub, Inc. and Google LLC, only if you choose to sign in with them. They see that you are signing in to 7.HT and handle that sign-in under their own privacy policies;
  • Google Safe Browsing: when a link is created or changed, its destination address is checked against Google's list of unsafe websites. No information about you is sent with it.

When a link is created, our servers also load the destination page once to read its title. This request comes from our servers, not from your device.

5. Where your data is stored

Our database is hosted in the United States (AWS us-east-1 region via Neon), and our website runs on Vercel's global network. If you are outside the United States, your data is transferred there. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for these transfers.

6. How long we keep it

  • individual visit records: 7 days, after which they are combined into daily totals;
  • daily visit totals: 90 days on the free plan, 2 years on Pro and 3 years on Business;
  • trial-use counters: 2 days;
  • login codes: until used, or 10 minutes;
  • login sessions: 30 days, or until you log out;
  • account and link data: until you delete the link or your account;
  • abuse reports: as long as needed to handle them and prevent repeat abuse.

7. Cookies

We use only two cookies, both necessary for the service, so we do not show a cookie banner:

  • 7ht_session: keeps you signed in (30 days);
  • 7ht_lang: remembers your language choice in the dashboard (1 year).

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. You can view and delete your links in the dashboard at any time.

To exercise any other right, including deleting your account, email support@7.ht from the address you sign in with. We will reply within 30 days. You also have the right to complain to your local data protection authority.

Because visitor statistics contain no names, email addresses or IP addresses, we usually cannot link them to a specific visitor.

9. Security

Connections to 7.HT are encrypted with HTTPS, login codes and sessions are stored only as hashes, and access to production systems is restricted. No system is perfectly secure, but we will notify you and the relevant authorities of a breach affecting your data as the law requires.

10. Children

7.HT is not directed at children, and we do not knowingly allow anyone under 16 to create an account. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We will update the date at the top when we change this policy, and email account holders before significant changes take effect.

12. Contact