Cookie policy

Cookies are small pieces of information stored on your device when you visit a website.

Websites may also use other technologies that store information on, or access information from, a user's device. These can include:

• local storage;
• session storage;
• pixels and tags;
• scripts;
• SDKs;
• security or anti-abuse tokens; and
• similar browser or device technologies.

For simplicity, we refer to these technologies collectively as “cookies” in this policy where appropriate.

Ordinary server-side processing, such as server logs, IP-based security checks or requests made between our servers and security providers, is not itself a cookie. Such processing is described in our Privacy Policy.

its.gd uses only the technologies necessary to operate, secure and improve the service, together with optional analytics where you have given the required consent.

We do not use advertising cookies on our short-link safety interstitials.

We do not load third-party advertising or tracking pixels on those interstitials.

Optional analytics technologies are not activated before the required consent has been given.

Under § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), storing information on a user's device or accessing information already stored there generally requires consent.

Consent is not required where the storage or access is strictly necessary to provide a digital service expressly requested by the user or where another statutory exception applies.

Where personal data is subsequently processed, the processing must additionally have a legal basis under the General Data Protection Regulation (GDPR).

Depending on the purpose, these legal bases may include:

• Article 6(1)(a) GDPR — consent;
• Article 6(1)(b) GDPR — performance of a contract or steps requested before entering into a contract;
• Article 6(1)(c) GDPR — compliance with a legal obligation; and
• Article 6(1)(f) GDPR — legitimate interests, particularly security, abuse prevention and reliable operation of the service.

Strictly necessary technologies enable functionality required to provide its.gd or a feature expressly requested by you.

Depending on how you use the service, they may be required for:

• login and authentication;
• session management;
• account and dashboard functionality;
• security;
• CSRF protection;
• fraud and abuse prevention;
• rate limiting;
• bot protection;
• storing your privacy choices;
• checkout and payment functionality; and
• maintaining reliable service operation.

Where storage or access on your device is strictly necessary to provide a service expressly requested by you, consent is not required under § 25(2) TDDDG.

Any associated processing of personal data may be based on Article 6(1)(b) GDPR where necessary to provide the requested service or Article 6(1)(f) GDPR where necessary for security, abuse prevention or reliable operation.

its.gd stores your cookie and privacy preference so that we can remember your choice.

The preference is currently stored in your browser's local storage under:

itsgd.consent.v1

This entry may record information such as:

• whether optional technologies were accepted or rejected;
• the categories you allowed;
• your consent status; and
• the relevant consent version.

The entry remains in local storage until you clear your browser data, the implementation changes, or you change your choice through our cookie settings.

Browser local storage is not automatically transmitted to our servers in the same way as a cookie with each request.

We use this storage so that your privacy choice can be respected and you do not need to answer the consent request on every page or every visit.

Security is a central part of its.gd.

We may use strictly necessary technologies to:

• distinguish legitimate traffic from automated abuse;
• prevent bots and spam;
• enforce rate limits;
• protect accounts;
• detect attacks;
• prevent fraudulent use;
• protect the service and its infrastructure; and
• provide secure access to requested functionality.

These technologies may be provided partly through our infrastructure and security providers, including Cloudflare.

Technical information such as IP addresses, request metadata, browser information, access times and security events may also be processed server-side. Further information about this processing is provided in our Privacy Policy.

We use Cloudflare for DNS, security, routing, performance and protection against malicious or abusive traffic.

Depending on the Cloudflare services and security measures triggered by a request, Cloudflare may use cookies or similar technologies for purposes such as:

• distinguishing legitimate visitors from bots;
• detecting attacks;
• performing browser or security challenges;
• managing traffic;
• applying security rules; and
• maintaining reliable service delivery.

Related information may include:

• IP address;
• browser and device information;
• request metadata;
• security signals;
• firewall events; and
• challenge-related information.

Where Cloudflare storage or access on your device is strictly necessary for security or to provide the service requested by you, it is used without optional analytics consent.

Associated personal-data processing may be based on Article 6(1)(f) GDPR for our legitimate interests in protecting its.gd, its users, visitors and infrastructure.

More information is available in Cloudflare's Cookie Policy, cookie documentation and Privacy Policy:

• Cloudflare Cookie Policy: cloudflare.com/cookie-policy
• Cloudflare Cookies Documentation: developers.cloudflare.com
• Cloudflare Privacy Policy: cloudflare.com/privacypolicy

We use Google Analytics 4 to understand how visitors use the main its.gd website and to improve the service.

Google Analytics is optional.

Where consent is required, Google Analytics is not activated until you have given consent through our consent system.

Depending on Google's current implementation and our configuration, Google Analytics may process information such as:

• page views;
• interactions and events;
• referrer information;
• browser and device information;
• approximate location;
• online identifiers; and
• analytics identifiers.

Google Analytics may set cookies including:

• _ga — used to distinguish visitors, generally stored for up to two years;
• _ga_<container-id> — used to maintain session-related information, generally stored for up to two years; and
• other analytics cookies where applicable to the configuration in use.

The exact cookies used may depend on Google's implementation and our configuration.

Legal basis for device storage/access: your consent under § 25(1) TDDDG.

Legal basis for subsequent processing of personal data: Article 6(1)(a) GDPR.

You can withdraw your consent at any time through our cookie settings. Withdrawal applies for the future.

Google Analytics is not loaded on its.gd short-link safety interstitials or redirect flows.

No third-party advertising pixels are loaded there.

Further information is available in Google's Privacy Policy, Google Analytics documentation and Google Analytics Data Processing Terms:

• Google Privacy Policy: policies.google.com/privacy
• Google Analytics Data Processing Terms: support.google.com/analytics/answer/3379636

We use Stripe to process paid plans, subscriptions, checkout, invoices and payments.

When you choose to use a paid service and enter the Stripe checkout process, Stripe may use cookies and similar technologies necessary to:

• provide checkout;
• process payments;
• maintain checkout sessions;
• authenticate transactions;
• prevent fraud;
• assess payment risk;
• prevent unauthorized transactions; and
• comply with applicable legal requirements.

Depending on Stripe's implementation, related information may include:

• IP address;
• browser and device information;
• checkout information;
• payment information;
• security and fraud signals; and
• technical interaction data.

Some Stripe technologies are necessary to provide the payment functionality you expressly request.

Stripe may also process information under its own responsibility for certain payment, fraud-prevention, compliance or legal purposes.

Further information is available in Stripe's Privacy Policy and Cookie Policy:

• Stripe Privacy Policy: stripe.com/privacy
• Stripe Cookie Policy: stripe.com/legal/cookies-policy

Lovable.dev is used in connection with the development and technical implementation of its.gd.

To the extent that Lovable-provided functionality used on the live its.gd service stores information on or accesses information from your device, that technology is treated according to its actual purpose.

Strictly necessary functionality may be used without consent where the statutory requirements are met.

Optional analytics or tracking technologies are activated only where legally permitted and, where required, after consent.

Further information is available in Lovable.dev's Privacy Policy and Data Processing Agreement:

• Lovable.dev Privacy Policy: lovable.dev/privacy
• Lovable.dev Data Processing Agreement: lovable.dev/data-processing-agreement

its.gd runs on Lovable Cloud infrastructure to host and operate the service.

Hosting infrastructure processes technical requests and may generate server logs containing information such as:

• IP addresses;
• request metadata;
• access times;
• technical errors; and
• security events.

This is primarily server-side processing and does not necessarily involve storing cookies on your device.

Further information about server-side processing and retention is provided in our Privacy Policy.

We currently use Lovable Email, using Mailgun as an underlying email-delivery provider, for transactional and service-related emails.

Email delivery itself does not normally require website cookies on its.gd.

The providers may process information necessary to deliver emails, including:

• email address;
• message information;
• delivery status;
• bounce information; and
• technical delivery metadata.

If optional email-open or interaction tracking is enabled, it will be used only where legally permitted and subject to any required consent.

More information about email processing is provided in our Privacy Policy.

Every its.gd short link passes through our safety interstitial before the visitor can continue to the destination.

The interstitial may process technical request information necessary to:

• identify the requested link;
• display its destination;
• display its safety status;
• prevent abuse;
• maintain security; and
• record aggregated link statistics where applicable.

We do not load Google Analytics, advertising pixels or third-party marketing trackers on the safety interstitial.

The visitor actively decides whether to continue to the destination.

Once the visitor leaves its.gd, cookies and other technologies used by the destination website are controlled by that website and are subject to its own privacy and cookie information.

When you submit a destination URL, its.gd performs safety checks before activating the short link.

These checks primarily take place server-side and do not require advertising or analytics cookies.

Technical data may be processed to perform security checks, prevent abuse and enforce rate limits.

The safety systems and external threat-intelligence providers involved are described in our Privacy Policy.

Depending on the applicable its.gd plan, link owners may receive aggregated or statistical information such as:

• click counts;
• country or region;
• device category;
• operating system;
• source or referrer; and
• other aggregated usage statistics.

Link analytics are intended to provide statistical information rather than identify individual visitors.

Where these statistics can be generated from ordinary server requests without storing or accessing additional information on a visitor's device, no analytics cookie is required for that purpose.

If its.gd introduces link-analytics functionality that requires non-essential storage on or access to a visitor's device, it will be activated only where legally permitted and after obtaining consent where required.

Some paid its.gd plans may allow link owners to configure campaign parameters such as UTM parameters.

Where configured, these parameters may be appended to the destination URL when the visitor chooses to continue.

Campaign parameters already present in the destination URL are not overwritten.

The parameters themselves are not cookies.

Once the visitor continues to the destination website, that website may process the parameters and may use its own cookies or analytics technologies. Such processing is governed by the destination website's privacy practices, not by its.gd.

Storage periods depend on the technology and its purpose.

Examples include:

• session technologies: generally until the browser session ends;
• security technologies: for the period necessary to perform or remember the relevant security function;
• authentication technologies: for the applicable login or authentication period;
• consent preference: itsgd.consent.v1 remains in local storage until you clear it, change your preference, or the implementation is replaced;
• Google Analytics: according to the configured Google Analytics cookie and data-retention settings;
• Stripe technologies: according to Stripe's applicable configuration and payment requirements.

Where a consent-management interface provides more specific information about a technology, provider, purpose and duration, that information reflects the current technical configuration.

You can change your optional cookie settings or withdraw consent at any time through the cookie settings available on its.gd.

Withdrawing consent is intended to be as easy as giving it.

Withdrawal applies for the future and does not affect processing that was lawful before withdrawal.

Where technically applicable, withdrawing consent prevents the relevant optional technologies from being used in the future and removes first-party optional cookies or storage controlled by its.gd.

You can also delete cookies and local storage through your browser.

Blocking strictly necessary technologies may prevent some features from functioning correctly, including:

• login;
• account and dashboard functionality;
• checkout;
• payments;
• consent preferences; and
• security functionality.

its.gd does not use short-link safety interstitials as advertising or behavioral-tracking pages.

We do not place:

• advertising pixels;
• retargeting pixels;
• behavioral advertising cookies; or
• third-party marketing trackers

on those pages.

This does not prevent the destination website from using its own cookies or tracking technologies after the visitor chooses to leave its.gd and visit that website.

We may update this Cookie Policy when our technical implementation, service providers, features or legal requirements change.

The current version will be published on its.gd with an updated “Last updated” date.

Where a change affects technologies requiring consent, we will update the consent mechanism as necessary and obtain new consent where legally required.

For questions about this Cookie Policy or our use of cookies and similar technologies, contact:

DOMU.STUDIO
Dominic Müller
Mainzer Straße 19
50678 Cologne
Germany

Email: contact@domu.studio