Terms, privacy and data processing

c1k.me is operated by Michal Roth, a sole trader (OSVČ) holding a Czech trade licence, IČO 71546801, registered address Průchova 1103/32, 150 00 Praha 5 - Košíře, Czech Republic. The operator is not registered for VAT. Contact is by email at support@c1k.me. Purchases are sold through Link, Stripe's merchant of record service, which collects the price and any tax due and issues your receipt and invoice; the service itself is provided by the operator. These terms are governed by Czech law, and the courts of the Czech Republic have jurisdiction, without removing any protection you have as a consumer under the mandatory law of your country of residence.

A hosted short link service: you create short URLs that redirect visitors to destinations you specify, and the service records aggregate redirect counts. A subscription provides one organization with REST and MCP access, analytics retained for up to 30 days, and one capacity pack granting up to 10 members, up to 100 active links and up to 400 additional held links. Further packs may be added at the same price at any time, with no limit on the number held per organization, each raising those three ceilings by the same amounts. All other limits are fixed and are not affected by the number of packs held.

You must provide a working email address, keep your credentials confidential and are responsible for activity under your account, including actions taken by API credentials and AI assistants you authorize. Notify us promptly if you believe a credential has been exposed; revocation is available to you immediately in the application. Accounts are for humans; a service account belongs to an organization, not to a person.

Each capacity pack costs €5 per year plus any VAT or sales tax that applies, which Stripe calculates at checkout from your location; the checkout may also show the price converted into your local currency. Payment is taken in advance by card, Apple Pay, Google Pay or Link, as Stripe offers them. Each pack is its own annual subscription: a pack added later is charged the full €5 and renews on the anniversary of its own purchase; packs are not prorated and are not combined into one invoice. Link emails a receipt and a PDF invoice at purchase and at every renewal, and a reminder before each renewal. You may cancel a pack at any time on the billing page, or manage orders, payment methods and cancellations at link.com; a cancellation takes effect at the end of the paid year. You may withdraw from any purchase within 14 days of making it and receive a full refund by writing to support@c1k.me, without giving a reason. Stripe handles payment disputes, and Link support answers questions about a payment. Price changes are announced by email to account holders and on this site at least 30 days before they take effect, and existing subscriptions renew at their original rate for at least 24 months after any announced increase.

If the last pack of an organization lapses, because a renewal payment failed or because it was cancelled and its paid year ended, links continue to resolve for 30 days while the organization becomes read-only, and export remains available throughout that window. After 30 days the organization is suspended and its links stop resolving, returning 410 Gone. Slugs stay reserved and are never reused. We may suspend an organization immediately, with notice where practical, for unlawful use, abuse of the service, or activity that threatens the stability or reputation of the platform.

You may not use c1k.me to distribute malware or phishing, to conceal the destination of fraudulent or deceptive content, to circumvent another service's protections, to distribute material that is unlawful in the Czech Republic or your own jurisdiction, or to send unsolicited bulk messages. Nor may you attempt to exceed published rate limits, probe another organization's data, or resell the service as your own. Reports of abuse are investigated and offending links are disabled; we will tell the account holder what was removed and why unless legally prevented.

Destinations, titles, tags and other content you enter remain yours. You grant only the licence needed to operate the service: storing your data, serving redirects and producing your analytics. We do not sell your data, do not use it to build advertising profiles and do not share it with third parties other than the subprocessors listed below. Export in CSV and JSON is available at any time without asking.

The service is provided on a commercially reasonable efforts basis. There is no contractual uptime guarantee and no service credits, because a €5 annual subscription cannot fund one honestly. There is no response-time commitment. The live state of the service is reported at /health. The service runs on a single hosting provider, so a provider outage takes redirects down with it; this is a known and disclosed risk.

Analytics report recorded redirects: requests the service handled and successfully wrote down. They include automated traffic, they are labelled with coverage when recording was interrupted, and unique figures are statistical estimates. They are not a count of people and must not be relied on as an authoritative measure for billing, contractual reporting or regulatory purposes.

To the maximum extent permitted by law, total liability in any twelve month period is limited to the fees you paid in that period. We are not liable for indirect or consequential loss, lost profits, lost business or loss of data beyond restoring from the most recent backup. Nothing here excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded, and your mandatory statutory rights as a consumer are unaffected.

You may delete your organization at any time; deletion is immediate and irreversible, and its links then return 410 Gone. If the service itself were ever to be discontinued, you would receive at least 90 days notice by email and on this site, export would remain available throughout that period, and the unused part of any paid year would be refunded.

Material changes are announced by email to account holders and on this site at least 30 days before they take effect. If you do not accept a change, you may cancel before it applies and receive a refund of the unused part of the paid year.

If you are a consumer and a dispute cannot be settled directly, you may turn to the Czech Trade Inspection Authority (Česká obchodní inspekce), ADR department, at https://adr.coi.cz, for out-of-court resolution.

Email address, display name, a password hash, optional two-factor secret, session records, and records of your purchases. Card and other payment details are entered on Stripe's checkout and never reach c1k.me; Stripe processes them as merchant of record under its own privacy policy. The lawful basis is performance of the contract, and for security logging, legitimate interest. Account data is kept while the account exists and for 30 days after deletion, except purchase records, which are retained for the statutory accounting period.

A timestamp, the link identifier, the referring host, a coarse client classification, and a short-lived salted derivation used only to estimate unique clients within a single day. No cookies are set on the redirect path, no advertising or analytics scripts run, and no profile is built across links, sites or days. IP addresses are used transiently to compute the daily derivation and rate limits and are not stored in analytics records.

Analytics are retained for at most 30 days and may be shortened to 14 or 7 days, or switched off entirely, by an organization administrator. The activity feed holds the most recent 100 events per organization. Deleting a link destroys its retained analytics immediately.

One session cookie in the application, strictly necessary for signing in, and one short-lived cookie on a password-protected link once the password is accepted. No analytics, advertising or third-party cookies anywhere on this site or on the redirect path. Because only strictly necessary cookies are used, no consent banner is shown.

Under the GDPR you may request access, rectification, erasure, restriction, portability, and may object to processing based on legitimate interest. Export is self-service and immediate; other requests are answered by email within 30 days. You may complain to your national supervisory authority, which in the Czech Republic is the Office for Personal Data Protection.

Processing only on your documented instructions, which the service configuration constitutes; confidentiality commitments for anyone with access; appropriate technical and organizational measures including encryption in transit, hashed credentials, per-organization isolation enforced in code, and least-privilege scoped access; assistance with data subject requests and with your obligations under Articles 32 to 36; deletion or return of data on termination; and reasonable information to demonstrate compliance.

Subreg (Gransy s.r.o., Czech Republic) for hosting, which is in the EU; Stripe for payments and as merchant of record for purchases; and Resend for transactional email. There are no others. Stripe and Resend are US companies and may process data in the United States under the EU-US Data Privacy Framework, standard contractual clauses, or both. New subprocessors are announced by email to account holders and on this site at least 30 days before they are engaged, and you may terminate with a refund of the unused part of the paid year if you object.

You are notified without undue delay and in any event within 48 hours of the operator becoming aware of a personal data breach affecting your data, with the facts known at that time and updates as the picture becomes clearer. Audit rights are satisfied by written responses to a reasonable security questionnaire once per year; on-site audits are not offered at this price point, and that limitation is stated here rather than buried.