For anonymous use, we only store the link content you create (destination URL or uploaded file) plus the expiry and password you set (passwords are stored as irreversible hashes). When you sign in with Google, we additionally store your Google account identifier, email, name and avatar for account identification and link ownership.
When you upload a file, we record the source IP address and time of the upload, used solely to prevent abuse and to cooperate with law enforcement investigations of unlawful content as required by law. This record is not used for any other purpose.
To protect uploaders, photos (JPEG/PNG) have their EXIF metadata — including GPS location and camera information — removed automatically before storage. MP4/MOV videos have location and user-data fields stripped from their headers before upload. This is a lossless operation that does not affect quality or playback.
When a link is opened we record anonymized analytics: time, country/region, referrer domain, browser and device type. We do not store visitor IP addresses. Detailed events are automatically deleted after 90 days; only daily aggregate counts are kept.
We use a small number of essential cookies: sign-in session, password unlock token (10 minutes) and view-count deduplication (1 hour). We also use Google Analytics for overall traffic insight and Cloudflare Turnstile for human verification.
These apply only to your browsing on the glacat.com website. Visitors who click a short link never load any third-party analytics script — the redirect is performed directly by the server without rendering a page, so their browsing is never exposed to third parties.
When a link expires it immediately becomes inaccessible, and the file and related data are then permanently deleted from the system. Signed-in users can delete their own links and analytics from the dashboard at any time.
For any privacy-related questions, email report@glacat.com.
Last updated: August 2026