Privacy Policy

SK.TN is designed to collect as little data as possible. This policy explains exactly what is stored and why.

Cookies

SK.TN uses a single, strictly necessary cookie:

  • Name: vault
  • Purpose: Identifies your vault so you can manage your links and sends. Without it, you cannot edit or delete anything you create.
  • Duration: 10 years (or until you clear cookies).
  • Flags: HttpOnly, Secure, SameSite=Lax. It cannot be read by JavaScript and is only sent to SK.TN over HTTPS.

No analytics cookies, tracking pixels, or third-party cookies are used. Ever.

Data Stored (Links)

When you create a shortened link, we store:

  • The short path (e.g. my-link)
  • The destination URL
  • A SHA-256 hash of your vault key (for ownership; we never store the key itself)
  • An optional link password (if you set one)
  • An optional expiry timestamp

Data Stored (Sends)

When you create an encrypted send, we store:

  • AES-GCM ciphertext, IV, and PBKDF2 salt (encrypted client-side; we never see the plaintext or password)
  • An optional name label (visible only to you in the sidebar)
  • An expiry timestamp (max 30 days)
  • A destroy-after-read flag

We cannot decrypt your sends. We do not retain copies after deletion or expiry.

Rate Limiting

To prevent abuse, we rate-limit link creation. Your IP address is hashed (SHA-256) before storage (we never store raw IP addresses). These hashed records are automatically purged after a 20-minute window expires.

No Tracking

SK.TN does not use analytics services, fingerprinting, advertising, or any form of cross-site tracking. Server logs may exist at the infrastructure level (Cloudflare) but are not processed or retained by us.

Third Parties

The service runs on Cloudflare Workers. Cloudflare's infrastructure may process requests as part of normal operation. We also load the Inter font from fonts.bunny.net, which does not set cookies or track users.

Contact

For privacy questions or data removal requests: abuse@sk.tn