Privacy Policy

Last updatedApril 26, 2026

0.mk is a URL shortening service operated by NoCode, Inc. We respect your privacy and only collect data necessary to provide our service. We never sell your information.

1. Who we are

0.mk is operated by NoCode, Inc., registered at 16192 Coastal Hwy, Lewes, DE 19958, United States.

For privacy inquiries, contact us here.

2. What information we collect

Account information

  • Email address (used for authentication via magic link)
  • Display name (optional, set by you)
  • Workspace name and membership

Link data

  • Destination URLs you shorten
  • Custom aliases and titles you set
  • Tags and organizational metadata
  • Custom domains you configure

Analytics data (aggregated)

  • Click counts per link (aggregated daily)
  • Country of origin (derived from IP, IP is not stored)
  • Referrer domain
  • Device type and browser family

We do not store visitor IP addresses. Country data is derived at the edge and only the country code is retained. Individual visitor identities are never recorded.

Technical data

  • Browser type and version (for our dashboard)
  • Device information
  • Pages visited within 0.mk

3. How we use your information

  • Provide URL shortening and redirection services
  • Generate click analytics for your links
  • Send transactional emails (magic link login, team invites)
  • Prevent abuse and enforce our acceptable use policy
  • Improve service performance and reliability

4. Legal basis for processing (GDPR)

  • Contract performance: processing your links and providing the service you signed up for
  • Legitimate interest: analytics, security, and abuse prevention
  • Consent: optional marketing communications (you can opt out anytime)

For more details on your GDPR rights, see our GDPR page.

5. How we share your information

We never sell your personal information. Limited sharing occurs with:

  • Infrastructure providers: Vercel (hosting), Cloudflare (edge network, redirects), DigitalOcean (database) - all under data processing agreements
  • Email provider: Resend (transactional emails only)
  • Team members: within your workspace, as configured by workspace settings
  • Legal requirements: when required by law or court order

6. Data retention

  • Account data: retained while your account is active, deleted within 30 days of account closure
  • Link data: retained until you delete links or close your account
  • Analytics data: aggregated click data retained for up to 2 years
  • Audit logs: retained for 1 year for security purposes

7. Data security

  • All data encrypted in transit (TLS 1.3) and at rest
  • Database connections require SSL
  • Authentication via secure, time-limited magic links
  • API access via revocable bearer tokens
  • Rate limiting on all public endpoints

8. Your rights

  • Access: request a copy of your data
  • Correction: update inaccurate information
  • Deletion: delete your account and all associated data
  • Portability: export your links as CSV
  • Objection: opt out of non-essential processing

To exercise any of these rights, contact us. We respond within 30 days.

9. International transfers

Your data may be processed in the United States and other countries where our infrastructure providers operate. We ensure adequate protection through Standard Contractual Clauses (SCCs) and data processing agreements with all providers.

10. Children

0.mk is not intended for users under 16 years of age. We do not knowingly collect information from children.

11. Changes

We may update this policy as our service evolves. Significant changes will be announced via email and posted here with a new date.

12. Contact

For any privacy-related questions, reach out via our contact page.