Updated: 2026-11-05
Privacy Policy
This Privacy Policy explains how iID.lt (“we”, “us”), acting as data controller established in Lithuania, processes personal data when you use our website and tools. Processing complies with the EU General Data Protection Regulation (GDPR) and applicable Lithuanian data protection law.
1. Data controller
Controller: the operator of iID.lt (Lithuania). Privacy contact: info@iid.lt. If a registered legal entity name and company code are published on the site or provided on request, they form part of the controller identification.
2. Personal data we process
Depending on how you use the Service, we may process: IP address and approximate location derived from IP; browser and device data (user agent); request timestamps and technical logs; short-link metadata (alias, destination URL, creation/update time, status); security and abuse-check results; cookie and consent choices; and, if you create an account, email address, authentication identifiers, and account activity needed to provide the dashboard. Destination URLs and payloads you enter may themselves contain personal data if you include it — you are responsible for that content.
3. Purposes and legal bases (GDPR Art. 6)
We process data to: provide and maintain the Service, including redirects, quotas, and accounts (Art. 6(1)(b) contract / steps prior to contract, or Art. 6(1)(f) legitimate interests for guest use); keep the Service secure and prevent spam, fraud, and abuse (Art. 6(1)(f)); remember essential preferences and consent choices (Art. 6(1)(c) / (f) and, where required, Art. 6(1)(a)); measure site usage with Google Analytics only after you accept analytics cookies (Art. 6(1)(a)); and comply with legal obligations (Art. 6(1)(c)). Legitimate interests include operating a reliable free tool, security, and defending legal claims. You may object to processing based on legitimate interests where the GDPR allows.
4. Cookies and similar technologies
We use essential cookies and similar storage for security, session/auth where applicable, and remembering your cookie choice. If you select Accept on the cookie banner, we load Google Analytics (Google LLC, measurement ID G-KXM7J7B8ER) to collect usage statistics such as page views, approximate region, and device/browser data. If you select Essential only, Analytics is not loaded. We do not use advertising profiling cookies. Your browser may also store technical data locally (for example localStorage for recent links on your device). You can change cookie choices by clearing site data or contacting us; withdrawing analytics consent does not affect essential processing needed to run the Service.
5. Recipients, processors, and transfers
We do not sell personal data. We use service providers (processors) such as hosting, database, email/auth, security filtering, and — only with your consent — Google Analytics, under GDPR-compliant instructions and contracts. Data is primarily processed in the EU/EEA. Where a provider processes data outside the EEA (for example Google), we rely on an adequacy decision and/or appropriate safeguards such as Standard Contractual Clauses, plus supplementary measures where required.
6. Retention
Short-link and related security/quota records are kept while the link or feature remains active and thereafter as needed for security, dispute handling, backups, and legal obligations, then deleted or anonymised. Account data is kept while the account is active and for a reasonable period after closure or as required by law. Consent and cookie records are kept as needed to demonstrate compliance or until replaced. Server logs are rotated on a shorter operational cycle unless needed for security investigations.
7. Your rights
Under the GDPR you may request access, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, and — where applicable — data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. You may request account deletion by contacting info@iid.lt. We may need to verify your identity before fulfilling a request. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI, https://vdai.lrv.lt) or with your local supervisory authority in the EEA.
8. Children
The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact info@iid.lt and we will take appropriate steps to delete it.
9. Security
We apply technical and organisational measures appropriate to the risk, such as HTTPS, access controls, and abuse filtering. No method of transmission or storage is perfectly secure; please use strong unique passwords for accounts and avoid placing highly sensitive personal data in public short links or QR payloads.
10. Changes and contact
We may update this Privacy Policy; the current version is published on this page with an updated date. Material changes will be indicated by updating the date (and, where appropriate, additional notice). Privacy questions and GDPR requests: info@iid.lt.