Privacy policy

Last updated: 20 October 2026

asus.lol is a URL shortener, QR code and barcode generator, temporary email service, link-in-bio page maker and seller of personal email addresses. This page explains what data we handle and why. We keep it to the minimum needed to run the service.

What we store

• Short links. The destination URL, the short code, when it was created, and any options you chose (expiry, click limit, social preview title, description and image address). Passwords are never stored; we keep only a salted hash.
• Click statistics. For each link, daily click counts grouped by country, device type (desktop, mobile, tablet), browser family (for example "Chrome" or "Instagram"), operating system (for example "iOS") and the website the click came from (its domain only, such as "t.co"). We do not store IP addresses, full user-agent strings, full referring URLs, or anything that identifies an individual visitor. Anyone who has a short link can view its statistics by adding + to it.
• Owner key. When you create a link or a link-in-bio page, your browser receives a secret key so you can edit or delete it later. We store only a hash of that key.
• API keys. If you create an API key, we store a hash of it, its label, when it was created and last used, and how many requests it has made.

Link-in-bio pages

A page at asus.lol/@name stores what you put on it: name, bio, links, design choices and, if you upload one, a profile picture (resized in your browser before it is sent). Pages are public by design, though we ask search engines not to index them. We count page views as a single number, without storing anything about the visitors. Deleting the page deletes its picture too.

Personal addresses

When you order a personal address (name@asus.lol), we store the name, the inbox it forwards to, the order status and the amount to pay. To verify that inbox, its address is sent to Cloudflare, which emails you a confirmation link; once confirmed, Cloudflare forwards incoming mail to it. We don't keep copies of forwarded mail; we only count how many messages were forwarded.

Payments are made in USDT on the Polygon blockchain. To confirm a payment we read public blockchain data from a Polygon node, and we store the transaction ID and the paying wallet address. Blockchain transactions are public and permanent; anyone can see them, independently of us.

What stays in your browser

Your recent links, their owner keys, and your preferences (theme, language, QR settings) are saved in your browser's local storage. They never leave your device unless you use them to edit or delete a link. Clearing your browser data removes them, and you will no longer be able to edit those links.

Services we use

• Cloudflare hosts the site. Your IP address is processed briefly to route requests, to limit abuse (rate limiting) and, where enabled, by Cloudflare Turnstile to check that you are not a bot. See Cloudflare's privacy policy.
• Google Web Risk checks destination URLs (including links on link-in-bio pages) against Google's lists of unsafe sites. The URL being checked is sent to Google. See Google's privacy policy.
• Cloudflare Email Routing verifies and delivers mail to the inbox a personal address forwards to.
• Public Polygon RPC nodes (such as PublicNode) are queried for incoming USDT transfers to our wallet. Only our wallet address and block numbers are sent; nothing about you.
• Google AdSense (when enabled) shows ads. With your consent, Google may use cookies to personalise ads. If you decline, only non-personalised ads are shown. You can change your choice at any time with "Cookie settings" at the bottom of the home page. See how Google uses data for ads.

QR codes

QR codes are generated entirely in your browser. The content you enter (including Wi‑Fi passwords and contact details) and any logo you upload are never sent to us.

Temporary email

When you create a temporary address, we store the address, when it expires, and a hash of the access key your browser keeps. Emails sent to that address (sender, subject, content and attachments) are stored so you can read them. Anyone with the access key, which your browser holds and which the "Open on another device" link contains, can read the inbox. Mail to addresses that don't exist is refused, not stored. Remote images in emails are blocked until you choose to load them, so senders can't track when you open a message.

An address and all of its mail are deleted automatically when it expires (after 1 hour, 1 day or 7 days, as you chose), or immediately when you delete it. Each inbox keeps at most its 100 newest emails.

How long we keep data

Links and their statistics are kept until they are deleted by their owner or removed by us. Expired links may be deleted at any time. Link-in-bio pages are kept until you delete them. Personal-address orders, including unpaid and cancelled ones, are kept so that payments can always be matched to the right order and checked later.

Your rights

Depending on where you live, you may have the right to access, correct or delete data about you. Because we do not store data that identifies visitors, most requests can be handled by deleting the link concerned. Contact us at abuse@asus.lol.

Contact

Questions about this policy: abuse@asus.lol.