Privacy Policy

We collect information strictly necessary to operate our link management platform, verify user authentication, and prevent fraudulent activity:

We process your personal information under lawful grounds including contractual necessity, legitimate interest in platform security, and your explicit consent:

• To deliver URL redirects, render dynamic QR codes, and host public Bio Pages.
• To send account activation emails, password reset notifications, and critical service announcements.
• To detect, investigate, and block malicious links (phishing, malware, spam) and protect internet users.
• To calculate aggregated statistical reports and geographic visitor charts for account holders.

When a visitor clicks a shortened link, scans a QR code, or visits a Bio Page created through 2if.net, we gather basic analytical signals to report aggregate traffic to the link owner:

• Geographic Origin: Country and city level metrics derived from IP lookup. Full IP addresses are anonymized or masked.
• Referring Channels: Referrer headers indicating whether traffic originated from search, social media, or direct access.
• Hardware & Software: Device category (mobile, desktop, tablet), browser engine, and operating system family.

We do not create persistent cross-site tracking profiles of individual consumers. Analytics are aggregated for marketing performance insights.

We utilize minimal, privacy-friendly first-party cookies necessary for core website functionality:

• Session Cookies: Maintains your secure logged-in state across dashboard pages and protects against CSRF attacks.
• Remember Me Token: An optional encrypted cookie that keeps your session active on your trusted device if selected.
• Theme & Locale Preference: Remembers your Dark Mode and language preference across browser visits.

To protect forms against credential stuffing and automated abuse, we integrate Cloudflare Turnstile. Turnstile evaluates browser signals non-intrusively without tracking visitors across the web or storing persistent advertising cookies.

We also partner with trusted infrastructure and payment providers who adhere to strict data security standards (e.g. PCI-DSS compliance).

We implement industry-standard cryptographic and administrative safeguards:

• All data in transit is encrypted using modern TLS 1.3 / SSL with 256-bit certificates.
• Passwords are hashed using one-way cryptographic algorithms with unique salt values.
• Database backups are encrypted at rest and access is restricted to authorized operations engineers.

Account data is retained as long as your account remains active. Upon account deletion, your personal data is purged or irrevocably anonymized within 30 days.

Regardless of your country of residence, we empower all users with comprehensive privacy rights:

When data is processed outside your home country, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) and adequacy decisions to ensure your data enjoys equivalent protection.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please notify us immediately so we can remove it.

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a security concern, please contact our Data Protection Team: