Privacy Policy

Last updated: November 2, 2026

This policy explains what information Candy X collects and how it is used. We collect as little as possible to run the Service.

Information you give us

• Account details: username, email address and a securely hashed password.
• Content: the links you shorten, link titles, bio page text and the image URLs you add.
• Reports: if you report a link, the details you write and an optional email address.

Information collected when someone clicks a short link

To show statistics to link owners, we record for each click: the date and time, the country (looked up from the visitor's IP address in a database stored on our own server – IP Geolocation by DB-IP), device type, browser or app, operating system, the referring website or app and whether the click came from a QR code.

We do not store visitors' IP addresses. Instead we store a one-way hashed value so we can count unique visitors without being able to identify anyone.

Cookies

We use a single essential session cookie to keep you logged in and to protect forms against misuse. We also remember your light/dark theme choice in your browser. We do not use advertising or tracking cookies.

How we use information

• to provide, secure and improve the Service;
• to show link owners their click statistics;
• to investigate abuse and keep the platform safe.

We never sell your personal information.

Third-party services

Pages load fonts from Google Fonts and the QR code generator from the cdnjs content delivery network. These providers may receive your IP address when your browser downloads those files.

Data retention & your rights

You can edit or delete your links at any time. Deleting a link also deletes its statistics. To delete your account or request a copy of your data, email admin@candyx.shop.

Changes

We may update this policy. The date at the top shows when it was last changed.