Privacy Policy

What we collect from link owners. Your email, name, password hash (or Google account ID if you sign in with Google), the WhatsApp numbers and messages you put into links, and payment records from our payment processor.

What we collect from visitors who tap a link. When someone opens a WSAP link we record the time, a one-way hash of their IP address that rotates daily (we never store the IP), country when provided by our hosting network, the referring site, and the device, operating system and browser family. We do not use tracking cookies on short links and we never see the WhatsApp conversation.

Why. To show link owners how their links perform, to detect abuse, and to keep the service running.

Cookies. A session cookie for logged-in users and the homepage generator, and a language preference cookie. Google Analytics may be enabled on the marketing pages.

Email. We send transactional email (verification, password reset, receipts) through Brevo. We do not sell or share your email.

Retention. Click records are kept for 13 months, then aggregated. Account data is kept until you delete your account; ask us and we remove it within 14 days.

Your rights. You can export your click data as CSV from the dashboard (Premium) and request access, correction or deletion at any time. This policy follows Malaysia's Personal Data Protection Act 2010.

Contact. WhatsApp us.

Last updated October 2026.