SECURITY

Designed to reduce link abuse.

Short links are useful precisely because they hide complexity. That makes careful validation, moderation, and privacy controls non-negotiable.

Destination controls

GO4L accepts only HTTP and HTTPS destinations. Embedded credentials, loopback hosts, private IPv4 ranges, local hostnames, and unsafe URI schemes are rejected before a link is stored.

Privacy-aware measurement

Unique visitors are estimated from a one-way hash of a shortened IP prefix, user-agent category, link, and hourly time bucket. Raw IP addresses are not written to analytics.

Bot classification

Known crawlers and preview agents are marked separately from human traffic. Classification is probabilistic, so analytics retains the distinction instead of silently discarding events.