Privacy & Cookie Policy

1. About this policy

This policy explains what information SafeRedirects handles when you use the website, why it is handled, how long it is retained, and the choices available to you. SafeRedirects is designed to minimize personal data: we do not require an account and do not ask for your name, email address, or other direct identifiers to analyze a URL.

2. Information processed by SafeRedirects

URLs and analysis results

When you submit a URL, we process and store the submitted URL, its redirect chain, destination URL, safety score, and technical findings such as DNS, SSL/TLS, domain, metadata, and threat-intelligence results. We use this information to perform the requested scan, display the result, avoid repeating recent scans, and maintain the reliability of the service.

Analysis records are configured to expire after seven days and are removed through our cleanup process. Processing records that fail or remain incomplete may be retained temporarily so that we can diagnose the failure. We do not associate submitted URLs with an account or use them to build a profile about you.

Network, security, and operational data

Like most online services, our servers receive technical request data needed to communicate with your browser. This can include your IP address, request time, requested endpoint, response status, and browser information. We use IP addresses transiently for rate limiting, abuse prevention, and service security—not to identify you or create a marketing profile. Error logs may include diagnostic details such as timestamps, error messages, and technical context.

3. Google Analytics and Tag Manager

Before you consent

SafeRedirects uses the basic implementation of Google Consent Mode v2. Analytics storage, advertising storage, advertising user data, and ad personalization are set to denied by default. Google Analytics and Google Tag Manager are not loaded, and no analytics data is sent to Google, until you actively accept analytics cookies.

After you consent

If you accept analytics cookies, Google Analytics 4 may collect page views, navigation and interaction events, session statistics, approximate location, referrer information, and browser and device information. GA4 stores a randomly generated client identifier in a first-party cookie so that it can distinguish visits and sessions. We use the resulting reports to understand aggregate use and improve SafeRedirects, not for advertising or to identify individual visitors.

Google may use an IP address to derive approximate location. For visitors in the European Union, Switzerland, and the United Kingdom, Google states that Analytics discards the IP address before the data is logged. See Google's regional data and privacy information.

What Google Tag Manager does

Google Tag Manager is a tag-delivery tool. It does not create visitor profiles by itself; it loads the analytics tags configured by SafeRedirects after analytics consent is granted. We require tags placed in the container to respect the consent choices described in this policy. Advertising consent remains denied in our website configuration.

4. Cookies and local storage

Necessary storage is used to remember choices you request. Analytics cookies are optional and are set only after consent. Browser restrictions may shorten the maximum durations shown below.

Google Tag Manager does not set a cookie merely by being present. Any tag added to the container in the future must be assessed and this table and consent configuration must be updated before that tag is enabled for visitors.

5. Your consent choices

Analytics is optional. You can accept all cookies, reject optional cookies, or review the analytics category in the preferences panel. Rejecting analytics does not affect the URL-analysis service.

You can reopen the preferences panel at any time using Cookie settings in the footer. If you withdraw analytics consent, SafeRedirects sends an updated denied consent state, removes the first-party _ga cookies accessible to the site, and reloads the page without Google tags. You can also delete cookies and local storage through your browser settings.

The consent library runs locally in your browser. Your selection is stored in thesaferedirects_cookie_consent cookie; the library provider does not receive your choice from SafeRedirects.

6. Third-party services

We use service providers to perform URL security checks and, with consent, analytics. Depending on the requested check, a submitted URL or destination may be checked against these services:

• Google Safe Browsing — checks URLs against known unsafe resources.
• VirusTotal — provides threat-intelligence and URL scan information.
• URLhaus — checks URLs against malware-distribution records.
• Google Analytics 4 — provides analytics only after consent.
• Google Tag Manager — delivers consent-gated analytics tags.

These providers process information under their own terms and privacy notices. You can review the Google Privacy Policy and Google's Analytics data safeguards. Google may process information on servers outside your country subject to its applicable data-transfer safeguards.

7. Retention

• URL analysis records are configured to expire after seven days.
• Rate-limiting data is kept only as needed for the active request window and service protection.
• Operational logs are retained only as needed for security, troubleshooting, and service reliability.
• The consent cookie lasts 182 days; the theme preference remains until you delete it.
• GA4 cookie durations are listed above. Google's event-level retention depends on the Analytics property settings and applicable Google policies.

8. Data sharing and sales

We do not sell personal information. We share information with the service providers described above only to operate the URL-analysis and consented analytics features, or when required by law, necessary to protect the service and its users, or involved in a legitimate business reorganization subject to appropriate safeguards.

9. Security

We use HTTPS, access restrictions, service monitoring, dependency updates, and limited retention to protect the information handled by SafeRedirects. No internet service can guarantee absolute security, but we work to reduce both the amount of data processed and the time it is retained.

10. Your privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal data, and to lodge a complaint with your local data-protection authority. You may withdraw analytics consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

SafeRedirects does not use accounts, so we may be unable to connect an analytics record or submitted URL to a particular person without additional information. We will explain this if it affects our ability to respond to a request.

11. Children's privacy

SafeRedirects is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through the service, please contact us so that the matter can be reviewed.

12. Changes to this policy

We may update this policy when the service, providers, or legal requirements change. We will publish the revised policy on this page and update the date above. If a change materially affects optional cookie use, we may increase the consent revision so that visitors are asked to choose again.