Privacy Policy

Last Updated: April 04, 2025

At ittle.co ("we," "us," or "our"), we value your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our URL shortening service ("Service") and the ittle.co URL Shortener Chrome Extension ("Extension").

1. Information We Collect

We collect the following types of information:

Personal Information:
- Email address, name, and user ID when you sign up or log in via Google OAuth2 or Firebase Authentication.
Authentication Information:
- Google ID tokens and Firebase custom tokens, stored locally in the Extension using Chrome’s storage API (`chrome.storage.local`).
Web History:
- The URL of the active tab in your browser when you use the Extension to shorten a URL.
Payment Information:
- Processed via Stripe for subscriptions on the ittle.co website (we do not store credit card details directly; this is not currently collected by the Extension).
Usage Data:
- IP addresses, device information (e.g., browser type, user agent), and analytics data (e.g., clicks on shortened URLs) collected server-side by ittle.co.
Content Data:
- Original URLs you shorten and any custom short codes you provide via the Service or Extension.

2. Purpose of Use

We use your information to:

Authenticate users and secure your account via Google OAuth2 and Firebase.
Provide the Service and Extension, including shortening URLs and enabling sharing on platforms like Facebook, Twitter, LinkedIn, WhatsApp, Messenger, Email, and Reddit.
Store authentication tokens locally in the Extension to maintain your login state across sessions.
Process payments and manage subscriptions via Stripe (website only).
Analyze usage patterns (e.g., click analytics) to improve the Service and Extension.
Communicate with you about your account or updates to the Service.

3. Disclosure of Information

We may disclose your information to:

Service Providers:
- Google (OAuth2 authentication), Firebase (authentication and token management), Stripe (payment processing), and MongoDB Atlas (data storage) to operate the Service and Extension.
Social Platforms:
- When you use the Extension to share a shortened URL, the URL is sent to the selected platform (e.g., Facebook, Twitter) as initiated by you.
Legal Requirements:
- To comply with applicable laws, regulations, or legal processes.
Business Transfers:
- In the event of a merger, acquisition, or sale of assets, with notice to you.

We do not sell your personal information to third parties.

4. Security Practices

We implement reasonable security measures to protect your data, including:

Encryption of data in transit using HTTPS for API calls (e.g., `https://ittle.co/auth/signin`, `https://itl.onl/api/shorten`).
Secure storage of authentication tokens in the Extension via `chrome.storage.local` (encrypted by Chrome).
Secure server-side storage with MongoDB Atlas and Firebase.
Access controls and authentication via Firebase.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data as follows:

Authentication Tokens: Stored in the Extension’s local storage until you log out or clear browser data.
Personal and Usage Data: Kept on our servers as long as your account is active or as needed to provide the Service, then deleted within 30 days of account deletion unless required by law.

6. Your Choices and Rights

You have the following options:

Access, update, or delete your account by contacting us at support@ittle.co.
Request a copy of your data (data portability) via support@ittle.co.
Opt out of non-essential communications by following email instructions.
Clear local Extension data by logging out or clearing browser storage.

7. Future Data Collection

We may expand data collection in the future to:

Display subscription status within the Extension (e.g., plan details from Stripe, no direct payment data).
Collect usage stats on share button clicks for analytics (e.g., most-used platforms).

Any changes will be reflected in an updated Privacy Policy with notice to you.

8. Contact Us

For questions about this Privacy Policy, contact us at support@ittle.co.