Privacy Policy

Last updated: October 26, 2026

About FIFO.media

FIFO.media is a product operated by Ensomnia Media. All billing, payments, and subscriptions are processed by Ensomnia Media via Stripe.

What We Collect

FIFO.media is designed with privacy as a core principle. We collect only the minimum information necessary to provide our service:

  • Account Information: Email address and password (hashed) for authentication
  • Link Data: The links you create and their associated metadata
  • Click Data: When someone clicks one of your short links we record the time of the click, the visitor's IP address, their browser user-agent string and the browser, operating system, and device type derived from it, the country, region, and city reported by our CDN, the referring URL and domain when the browser provides one, and any tracking tags you added to the link yourself (src, ref, vid, or UTM parameters).

The IP address is used for one purpose: distinguishing automated traffic from real visitors, so your click counts reflect people rather than crawlers. (Location comes from our CDN, not from the address.) A second pass runs hourly to finish classifying each click, and truncates the address as it does: it is reduced to its network prefix — the final octet of an IPv4 address is discarded — so within an hour of the click what remains identifies a network rather than a visitor. It is never sold, shared with advertising networks, or used to build a profile of an individual.

What We Do NOT Collect

We are committed to privacy-friendly analytics. We explicitly do NOT:

  • Set cookies or tracking pixels when someone clicks your links
  • Fingerprint browsers or devices
  • Build behavioural profiles, or track anyone from one site to the next
  • Sell or share visitor data with advertising networks or data brokers
  • Ask visitors for, or store, names, email addresses, or payment details

How We Use Your Data

Your data is used solely to:

  • Authenticate you and maintain your session
  • Store and manage your links
  • Display aggregated click statistics
  • Redirect visitors to your destination URLs

Data Security

We use industry-standard security measures to protect your data:

  • Passwords are hashed using bcrypt
  • All connections use HTTPS/TLS encryption
  • Data is stored in secure AWS infrastructure

Data Retention

Your account data and links are retained until you delete them or your account is closed. Each link and category also keeps a history of its edits (what changed, when, and whether it was made in the dashboard, with an API key, or by the disable schedule) so you can review and undo changes. That history is deleted automatically after about a year, and immediately when you delete the link or category. Individual click records are deleted automatically after roughly two years, and the address on each is reduced to its network prefix within an hour of the click. Aggregated daily statistics contain no address or user-agent and are retained for the lifetime of your account.

Your Rights

You can:

  • Access all your data through the dashboard
  • Delete individual links at any time
  • Close your account by asking through the Support page in your dashboard. We will close the account and delete your links, categories, and click data within 30 days of your request.