SECURITY

Designed to reduce link abuse.

Short links are useful precisely because they hide complexity. That makes careful validation, moderation, and access controls non-negotiable.

Destination controls

GO4L accepts only HTTP and HTTPS destinations. Embedded credentials, loopback hosts, private IPv4 ranges, local hostnames, and unsafe URI schemes are rejected before a link is stored.

Protected traffic intelligence

Click records may include an IP address, user-agent and coarse location metadata for security and workspace analytics. Event-level data is restricted to the owning workspace and platform administrators; public visitors cannot access it.

Bot classification

Known crawlers and preview agents are marked separately from human traffic. Classification is probabilistic, so analytics retains the distinction instead of silently discarding events.