Cookies

The French version prevails.

Shortit only uses the cookies needed for the service to work. No advertising cookies and no trackers.

Last updated 21 Oct 2026

What we use

Sign-in session__Host-shortit.session_token · 7 days, extended with use

Keeping you signed in from one page to the next. A session left unused for 7 days expires; signing out deletes it.

Authentication to a service you requested: exempt from consent.

Pending link__Host-shortit.pending · 24 hours

Only if you create a link without an account: it lets us attach that link to the account you create afterwards. Deleted when you sign in.

Strictly necessary for the service you requested: exempt from consent.

Google sign-in__Host-shortit.state · 5 minutes

Only if you choose “Continue with Google”: it protects the return from Google against a forged sign-in. Google sets its own cookies on its own domains, according to its policy.

Authentication security: exempt from consent.

Display preferenceBrowser local storage, not a cookie · Key: shortit-theme · Kept until you clear it

Remembering the light or dark theme you chose. Nothing is sent to our servers, unless you choose the theme from Settings: it is then also saved on your account.

Display preference that you choose yourself: exempt from consent.

“Password” noticeBrowser local storage, not a cookie · Key: shortit-password-prompt · Kept until you clear it

Only if you click “Later” in the notice offering to set a password: remembering not to show it to you again on this device. Nothing is sent to our servers.

Interface preference that you choose yourself, with no tracking: exempt from consent.

Anti-bot check (Cloudflare Turnstile)Any cookies or storage set by Cloudflare, according to its cookie policy and the Turnstile Privacy Addendum

Telling a visitor from an automated program on the home page, when requesting a sign-in code, on the forgotten-password page, on the report form, and when unlocking a protected link after two failed attempts. The widget, which is invisible, is loaded from challenges.cloudflare.com, on these pages only: you don’t have to do anything.

Service security against bots: Cloudflare classes its CAPTCHA cookies among the strictly necessary cookies. Name and duration not published by Cloudflare: to be recorded from real responses.

What we don’t use

No targeted advertising, no resale of data, no trackers, no audience measurement by a third party, and no script from another site is loaded in our pages, apart from Cloudflare’s anti-bot widget on the protected forms. All the cookies and storage above serve to provide the service you requested (sign-in, security, a preference you choose): in our reading of Article 82 of the French Data Protection Act and of the CNIL guidelines, they are exempt from consent. That is why no consent banner is shown. Click statistics use no cookie or storage in your browser: they are computed by our servers, with no IP address kept. A banner would become necessary if we added, for example, third-party audience measurement, an embedded video or an advertising pixel: this page would then be updated before that addition.

Managing your cookies

You can delete cookies at any time from your browser settings. Without the session cookie, you will have to sign in again on each visit.

A question?

Write to us at contact@shortit.fr. See also the privacy policy.