Privacy Policy
Effective: 27 October 2026. This notice explains how Gett2.cc handles personal data. It should be read together with our Terms of Service.
Who operates Gett2.cc
Onisokumen Egwu operates Gett2.cc personally from Nigeria and is the controller of personal data described in this notice. His contact location is 23 Lucky Freeman Street, Startimes Estate, Okota, Lagos, Nigeria. Contact him through the Gett2.cc contact form by choosing Privacy or data request; no personal email address is published.
What we handle and why
| Activity | Data | Purpose and proposed lawful basis |
|---|---|---|
| Account registration and access | Name, email, hashed password, verification and sign-in times, session data | Provide and secure the account and recover access; performance of the service agreement and security-related legitimate interests. |
| Link and QR creation | Link destinations, QR content, settings, ownership and changes | Provide the requested tools and enforce account limits; performance of the service agreement. Do not place confidential personal data in QR content intended for public sharing. |
| Visits to short links | Time, platform, device class, bot classification, referrer host, user agent, marketing parameters and a keyed hash of the visitor's IP address | Route visits, show link activity and investigate misuse; legitimate interests in operating and protecting the service, subject to an assessment of visitors' rights. The click table does not store raw visitor IP addresses. Hosting logs may separately contain them. |
| Contact requests | Name, email, topic and message | Answer the request and keep a record; legitimate interests in responding to enquiries. |
| Abuse reports | Reported link, reason, details and optional reporter email | Investigate unsafe links and protect visitors; legitimate interests in preventing abuse. |
| Required disclosures | Relevant records | Meet applicable legal obligations or respond to lawful requests. |
We do not currently use automated decisions with legal or similarly significant effects on people. Link statistics may classify traffic as likely human or bot, and reported links are reviewed before suspension.
Who receives data
When enabled, Cloudflare Turnstile checks public forms to help prevent bots and abuse. Cloudflare receives browser and network information, including the visitor’s IP address, to perform these checks. Our server sends the verification token to Cloudflare; it does not send the form’s name, email, password or message in that verification request. See Cloudflare’s Privacy Policy for its processing practices.
When enabled for the public site, Cloudflare also provides DNS, content delivery and website security. Its proxy processes request information such as IP addresses, requested URLs, browser details and security events. We configure caching for public static assets; account pages, private QR images and link redirects are not cached.
Our hosting and mail providers process data to run Gett2.cc. Abuse reports are saved in the application database and copied through Google Apps Script to a private Google Sheet for review. The copy contains the report ID, time received, short-link code, reason, details and optional reporter email. Access to the Sheet is restricted to the operator. Google processes this information to provide those services; see Google’s Privacy Policy.
The destination site or app receives a visitor when the visitor follows a link; its operator controls its own data practices. We do not sell account or click records.
Google AdSense is currently disabled. If advertising services that collect visitor data are enabled, we will update this notice and address any required consent before enabling them. Service providers may process data outside Nigeria; contact us if you need information about an applicable transfer.
We use a necessary session cookie to keep account holders signed in and protect forms. We do not currently use optional advertising cookies on our pages. A destination you choose to visit may use its own cookies.
How long data is kept
- Contact enquiries and abuse reports: 365 days in the application database. A daily routine also removes abuse-report copies older than 365 days from the private Google Sheet. Copies in email, server logs or backups may remain for their operational retention periods; contact us for information about a particular record.
- Individual click records: deleted after 365 days by the daily scheduler. Link summary counts can remain after individual records are removed.
- Account, link and QR content: while the account is active. You can request deletion through the contact form; we will review the request and remove data unless a lawful reason requires retention.
- Session records, hosting logs and backups: kept for operational and security needs according to the host's retention cycle. These copies may outlast deletion from the main application database.
Your rights and choices
Subject to applicable law, you may ask to access, correct or erase your personal data, object to or restrict certain processing, and make other requests available under the Nigeria Data Protection Act. Use the contact form's Privacy or data request topic. We may need to verify identity before disclosing account data. You may also complain to the Nigeria Data Protection Commission. We will not treat a policy statement as a waiver of your statutory rights.
Security and changes
We use password hashing, email verification, private account workspaces and access controls. No internet service can promise absolute security. We will update this notice when practices change, especially before adding advertising or new data recipients, and show a new effective date.