X-Links
Cookie notice
X-Links only sets the cookies it needs to keep you signed in and protect forms. No advertising or analytics cookies of our own.
Cookies X-Links sets
| Cookie | What it's for | How long |
|---|---|---|
_url_trim_session | Keeps you signed in and holds the security token that protects every form from cross-site forgery. Also carries one-time messages such as "Link created". | Until you close your browser or sign out |
remember_user_token | Only if you tick "Keep me signed in": signs you back in on this device. | 2 weeks, or until you sign out |
Both are strictly necessary for the service to work, so they don't need consent. They're marked secure and can't be read by scripts on the page.
Cookies from others
- Stripe: when you upgrade or manage a subscription, you're sent to Stripe's own pages, which set cookies to process payments and prevent fraud. See Stripe's privacy policy.
- Tracking pixels on some links: a Business customer can add a Meta Pixel or Google Analytics to their short links. When you click one of those links, the short page shown before the redirect loads that pixel, and Meta or Google may set their own cookies. The link's owner chose this, and is responsible for any consent their visitors' laws require.
X-Links pages load no trackers or advertising, and our fonts come from our own server. Signed-in pages load an icon set from cdnjs (Cloudflare) and Bootstrap's script from jsDelivr; like any web server, those see your IP address when they send the file, but they set no cookies.
Controlling cookies
You can block or delete cookies in your browser's settings. If you block X-Links' own cookies, you won't be able to sign in. Blocking third-party cookies stops tracking pixels from setting theirs and doesn't affect X-Links.