About X-Links, a link shortener from Canada
X-Links turns long, messy URLs into short links you can share, print as QR codes and measure. It started as one developer's tool for sharing links with co-workers and now runs on three plans.
- 1. You paste a long URLAny http or https address.
https://shop.example.com/collections/spring-2027?ref=newsletter - 2. X-Links gives it a short nameYour own slug, or a random one, plus a QR code.
x-links.ca/spring-sale - 3. Every visit is counted, then sent onCountry, browser and referrer are recorded before the visitor reaches your page.
How we protect your links. What happens to your account and data.
- Only you see your linksEvery link, its clicks and its settings are tied to your account. Other accounts get a not-found page, not a hint that the link exists.
- Passwords are hashedWe store a bcrypt hash, never the password. Ten wrong attempts lock the account for an hour, and repeated attempts from one address are slowed down.
- API tokens are fingerprintsA token is shown once when you create it. We keep only its SHA-256 fingerprint, so a copy of our database holds no usable token.
- Links only go to web pagesDestinations must be http or https addresses, so a short link cannot run code in a visitor's browser.
- Encrypted in transitEvery page and redirect is served over HTTPS with a strict content security policy.