Privacy Policy

Effective Date:  2026-07-30

This Privacy Policy explains what data we collect when you use Nev, why we collect it, and how we protect it.

It reflects our obligations under the General Data Protection Regulation (GDPR) and, where it applies, the California Consumer Privacy Act (CCPA).

• Information Collection
  • We collect data necessary to provide our services, including the URLs you choose to shorten and the analytics associated with those links. This data is collected through our web services, the Nev browser extension, and the Nev Android app, including its widget and notification features.
  • Nev is built to respect your privacy. We do not use third-party analytics, advertising, or tracking tools, we do not build profiles, and we do not follow you across other apps or websites. The information we collect, described below, is used only to operate, secure, and improve the service.
  • Our server logs every visit to our website and every click on a shortened link. Each log records your IP address, browser, device type, language preference, and the address that referred you, along with the general geolocation derived from that IP address (not device location services).
  • When a shortened link is clicked, we also record analytics for that link: the visit count, the time of the visit, and whether the visit came from a QR code. For each link we also record where it was shortened: on our website, in our Android app, or with one of our browser extensions. These analytics describe traffic to your links, not your use of our apps.
  • Referring addresses are stored in full, but only the referring website’s domain is ever shown. Any path, parameter, or token contained in a referring address stays private.
  • Providing the URL you want to shorten is necessary to use the service. There is no statutory or contractual obligation to provide it, but without it no shortened link can be created.
• Public Analytics
  • Analytics for a shortened link are available to anyone who knows that link. They show total and unique visit counts, QR code scans, visits identified as automated crawlers, countries, browsers, device types, visit times, referring domains, and where the link was shortened. They never include IP addresses, names, or other details that directly identify a visitor.
• Cookies

  We use cookies to run the service and to remember your settings. We do not use advertising cookies, third-party cookies, or cookies that track you across other websites.

  • Session Set on every visit. It protects your requests against cross-site request forgery, and it remembers the link you have just shortened, which is what allows you to customize or permanently delete that link. It holds no saved list of your links and is not affected by the settings below. This cookie is strictly necessary and cannot be turned off.
  • Settings Stores your chosen link expiration and whether Remember shortened URLs and Copy after shortening are enabled.
  • Saved links While Remember shortened URLs is enabled, the links you shorten are saved on your device so you can find them again. This cookie is written whenever that list changes, which happens when you shorten, import, customize, or remove a link. You can turn the setting off or clear the list at any time.
  • Cookie notice Records that you dismissed the notice, so it is not shown again.

  Settings and saved links are kept on your device for up to ten years, so your links and preferences survive between visits. No cookie is sent to a third party. Visit analytics are recorded on our server and do not rely on cookies.

• Use of Information
  • To provide, maintain, and improve our URL shortening services.
  • To analyze usage trends, such as link performance and traffic patterns.
  • To protect the service and its users, including detecting malicious links and preventing abuse.
  • To comply with legal and regulatory requirements.
  • Under the GDPR, we rely on the performance of our service (Article 6(1)(b)), our legitimate interests in security, abuse prevention, and service improvement (Article 6(1)(f)), and compliance with our legal obligations (Article 6(1)(c)) as legal bases for this processing.
• Sharing Information

  We do not sell or rent your data, and we do not use third-party analytics. Your information leaves our systems only in these cases:

  • When required by law, regulation, or legal process.
  • With the providers that host and operate our infrastructure, which are bound by confidentiality obligations. Our servers are located in Germany, within the European Union.
  • To screen links for malware and phishing, we check them against external threat intelligence, including Google Safe Browsing. We send only short, irreversible fragments of the address being checked, never the full address and never anything about the person visiting it. This is the only case in which anything reaches a recipient outside the European Union: those fragments go to Google LLC in the United States, a country covered by the European Commission’s adequacy decision for the EU-US Data Privacy Framework.
• Data Retention
  • A shortened link and its analytics are kept for as long as the link exists. Links stored permanently are kept for at least ten years from the day they are created.
  • After that, we may delete or anonymize data at our discretion. For example, a link that has not been visited in more than five years may be removed together with its analytics.
  • Server logs, including IP addresses, may be deleted or anonymized once they are no longer needed for security, abuse prevention, or analytics.
  • Deleting a shortened link deletes its analytics with it. You can ask us to delete data relating to you at any time.
• Security Measures
  • All traffic between you and Nev is encrypted in transit. Nev has no accounts and no passwords, so there is no login database to compromise, and we hold nothing about you beyond what this policy describes.
• Your Rights

  You have the following rights under applicable data protection laws:

  • Access data associated with your use of our services.
  • Request the correction of inaccurate data or receive a copy of your data in a portable format.
  • Request the deletion of collected data, subject to legal obligations.
  • Object to certain types of data processing or request that it be restricted, where applicable.

  For assistance or to exercise your rights, contact us. We will respond within 30 days. If you are unsatisfied with our response, you may contact your local data protection authority.

• Who Is Responsible and How to Reach Us
  • Nev is a free, non-profit service operated by Nevfar, which is the controller responsible for the data described in this policy.
  • Privacy inquiries and data protection requests are handled internally by Nevfar at privacy@nevfar.com.

  • Nev is operated entirely online, without a physical office, so email is the way to reach us.

• Children’s Privacy
  • Our services are not intended for individuals under 13 years old. If we learn that we have collected data from a child without parental consent, we will delete it.
• Policy Updates
  • This policy may be updated periodically to reflect changes in our services or legal requirements. Material changes will be announced on our updates page.
• Jurisdiction
  • This Privacy Policy is governed by the General Data Protection Regulation, without affecting any mandatory rights you have under the law of your country of residence.
  • You may lodge a complaint with your local data protection authority and seek a judicial remedy in the courts of your country of residence.