Privacy Policy

Last updated October 3, 2026

This is a small, invite-only set of web apps (such as shortlinks and screenshot sharing) run personally by Sam Graziano (“I” or “me”). This policy explains what information the service handles and why. It covers the apps on samgraz.com and its subdomains (such as apps.samgraz.com and links.samgraz.com), samg.us and its subdomains such as i.samg.us, and the people who use or visit them.

Information I collect

• Account information. When an invited user signs in with Google, I receive their name, email address, profile photo and Google account ID. I also store their role, invite status, last sign-in time and any profile photo they upload.
• Content you create. Shortlinks (the short name and its destination URL) and uploaded screenshots, along with each image’s size, dimensions and upload time. Location, camera and other embedded metadata is removed from images when they’re uploaded.
• Shortlink visit data. When anyone opens a shortlink, I record the time, an approximate location (country, region and city, derived from the visitor’s IP address by Cloudflare), device type, operating system, browser, the referring website and the browser’s user-agent string. IP addresses are stored only as a one-way hash, never in raw form. Viewing a screenshot is not tracked.
• Activity log. A record of account and content changes (such as invites, role changes and link or screenshot creation and deletion) for security and troubleshooting.
• Cookies. A sign-in session cookie that keeps you logged in across the apps, and your light/dark theme choice. There are no advertising or tracking cookies.

How information is used

Only to run the service: signing you in, showing you your links and screenshots, showing link owners how their links are used, and keeping the service secure and free of abuse. Your information is never sold or used for advertising.

Who can see it

• Shortlinks and screenshots are public to anyone who has the link.
• Click statistics for a shortlink are visible to its owner and to administrators.
• Administrators can see all accounts, links, screenshots and the activity log.

Service providers

The service relies on a few providers that process data on its behalf:

• Cloudflare hosts the site, database and file storage, and delivers content through its network. Cloudflare also scans hosted images for child sexual abuse material.
• Google provides sign-in.
• ipapi.co may be used to estimate a visitor’s location from their IP address in the rare case Cloudflare can’t provide one.

I may also disclose information if required by law or to protect the service and its users.

Retention and deletion

Content is kept until it’s deleted. You can delete your shortlinks and screenshots at any time; deleting a shortlink also deletes its visit data, and deleted screenshots are removed from storage and Cloudflare’s cache right away (a browser that already loaded one may keep showing it for a few minutes). You can delete your account from the Account page, or ask me to delete it for you.

Your choices

You can ask to see, correct or delete the information associated with you, including visit data, by contacting me at hello@samg.us.

Children

The service is not directed to children under 13, and I don’t knowingly collect their information.

Security

Data is encrypted in transit, access requires an invited Google account, and permissions are checked on every request. No system is perfectly secure, though, so please don’t upload anything highly sensitive.

Changes

If this policy changes, I’ll update the date above. See also the Terms of Service.

Contact

Questions or requests: hello@samg.us.