Docs
Privacy and data retention
Last updated
When someone taps a Jumper link we count the tap and keep no raw IP address and no raw user agent. Redirects set no cookies, and everything is hosted on Cloudflare in the EU. The binding text is the privacy policy; this page is the short version.
What a tap leaves behind
- Counted: the day, the link, the device class (such as iPhone or Android), the store it went to, the country, the website the tap came from, and the
utm_*values on the link. - Visitor id: a hash of IP address and user agent made with a random salt that changes every day and is deleted after the day. It cannot be reversed and cannot link two days.
- Never stored: the IP address, the user agent, a cookie, a fingerprint.
How long things are kept
| Data | Kept |
|---|---|
| Daily counts on free links | 30 days |
| Daily counts on paid and launch links | 2 years |
| A link and its pages | While it runs, plus 14 days of grace and up to 12 months after it expires, so it can be renewed |
| Account email | While the account exists |
| Abuse reports (reporter email and IP hash) | 180 days |
Who processes the data is listed on the subprocessors page. To report a link, use the report form; the rules are in acceptable use.
Questions
Do you store IP addresses or user agents?
No. Neither is stored anywhere. When a link is tapped we read them for an instant to tell the device apart, and keep only a daily hash of both, made with a random salt that is deleted after the day.
Does the redirect set cookies?
Never. Redirect responses carry no cookies, are not cached, and send no referrer. The dashboard has one cookie, on its own address, that keeps you signed in.
Where is the data stored?
On Cloudflare in the EU jurisdiction. The subprocessors page lists every company that touches personal data.