About X-Links, a link shortener from Canada

X-Links turns long, messy URLs into short links you can share, print as QR codes and measure. It started as one developer's tool for sharing links with co-workers and now runs on three plans.

  1. 1. You paste a long URLAny http or https address.https://shop.example.com/collections/spring-2027?ref=newsletter
  2. 2. X-Links gives it a short nameYour own slug, or a random one, plus a QR code.x-links.ca/spring-sale
  3. 3. Every visit is counted, then sent onCountry, browser and referrer are recorded before the visitor reaches your page.

How we protect your links. What happens to your account and data.

  • Only you see your linksEvery link, its clicks and its settings are tied to your account. Other accounts get a not-found page, not a hint that the link exists.
  • Passwords are hashedWe store a bcrypt hash, never the password. Ten wrong attempts lock the account for an hour, and repeated attempts from one address are slowed down.
  • API tokens are fingerprintsA token is shown once when you create it. We keep only its SHA-256 fingerprint, so a copy of our database holds no usable token.
  • Links only go to web pagesDestinations must be http or https addresses, so a short link cannot run code in a visitor's browser.
  • Encrypted in transitEvery page and redirect is served over HTTPS with a strict content security policy.