Security behind every link.
Linkr.lt handles links that many people click and data that our customers trust us with. This page explains how we protect the service, our users and the people who visit their links.
Four layers of protection
Security across the Linkr.lt experience
How we protect the service
Security built into every layer.
From account access to link destinations, security controls are built into the way Linkr.lt works.
Account security
Passwords are stored in hashed form, never in plain text. Two-factor authentication is available for accounts and sign-up and login forms are protected against automated abuse with CAPTCHA.
HTTPS / TLS
Every page on Linkr.lt and every Linkr.lt short link is served over HTTPS, helping keep connections protected in transit.
Password protection
Link owners can protect individual links with a password, so only the people they choose can reach the destination.
Abuse prevention
Destination URLs are validated before a short link is created. Reported links can be reviewed and restricted under applicable policies and law.
Access controls
Team members can be given different roles, while API keys can be regenerated when required. Administration access is limited to authorised staff.
Data protection
We collect only the data needed to provide the service. We do not sell personal data. Link owners see aggregated analytics rather than the identity of people who click. Backups are taken regularly.
Monitoring
We monitor service availability and review abuse reports and unusual link activity.
Security incident response
If we become aware of a security incident, we investigate, contain the issue and restore normal service as quickly as possible.
Vulnerability reporting
If you believe you have found a security vulnerability in Linkr.lt, email [email protected] with the subject "Security report".
Privacy & data
Security should protect people, not just systems.
Linkr.lt is designed to minimise the information needed to operate the service while giving customers useful information about their links and campaigns.
Responsible disclosure
Found something? Tell us first.
We review every valid report and keep you informed while we work on a fix. There is no paid bug bounty at the moment, but good reports are welcome and acknowledged.