MeroLinkby MeroSMS

Your links. Clear boundaries.

This page explains the information used by MeroLink. Updated 18 October 2026.

Account and workspace information

We store your account email, hashed verification tokens and workspace membership to secure access. Workspace owners manage member permissions. A workspace’s links and analytics are available to its authorized members.

What a click records

Opening a short link records its time, link, approximate country when available, browser and device category, referrer hostname and whether its user agent matches a known bot pattern. MeroLink’s click records do not store raw IP addresses, full referrer URLs or referrer query strings. Hosting and email providers may process network information to operate their services.

Limits of analytics

Human-classified traffic is an estimate based on user-agent filtering. Unknown locations remain unknown. Repeated requests are counted as separate clicks. Estimated daily unique visitors use a daily rotating, workspace-specific hash derived from IP and browser information. Raw IP addresses are not stored in click records. The same visitor on different days counts again; older events may not have this identifier.

Email and sessions

Transactional emails verify your address and provide secure, passwordless sign-in. Workspace invitations are emailed to invited addresses and may also be shared as private links. Owners may opt into scheduled analytics reports. Session cookies keep you signed in. We do not add advertising pixels to our transactional email templates.

Public short links

Public links can be opened by anyone who has the URL. Password-protected links require the password, which is stored only as a salted hash. Expired links may redirect to the owner’s configured fallback without a password. The destination may have its own privacy practices. Avoid placing secrets or sensitive personal information in short paths or destination URLs.

Access, correction and deletion requests

Contact merolink@merosms.com for account or data requests. Workspace owners can export their data and configure automatic click retention (30–730 days). Configuration snapshots are retained for up to 30 days. Deleted workspaces stop serving redirects and have a 30-day recovery window; after that, their data is permanently purged by scheduled maintenance. Deleted accounts are purged after 30 days once their owned workspaces are removed. Audit records support security reviews.