Privacy Policy

Last updated: September 11, 2026

About FIFO.media

FIFO.media is a product operated by Ensomnia Media. All billing, payments, and subscriptions are processed by Ensomnia Media via Stripe.

What We Collect

FIFO.media is designed with privacy as a core principle. We collect only the minimum information necessary to provide our service:

  • Account Information: Email address and password (hashed) for authentication
  • Link Data: The links you create and their associated metadata
  • Click Data: When someone clicks one of your short links we record the time of the click, the visitor's IP address, their browser user-agent string and the browser, operating system, and device type derived from it, the country, region, and city reported by our CDN, the referring URL and domain when the browser provides one, and any tracking tags you added to the link yourself (src, ref, vid, or UTM parameters).

The IP address is used for one purpose: distinguishing automated traffic from real visitors, so your click counts reflect people rather than crawlers. (Location comes from our CDN, not from the address.) A second pass runs hourly to finish classifying each click, and truncates the address as it does: it is reduced to its network prefix — the final octet of an IPv4 address is discarded — so within an hour of the click what remains identifies a network rather than a visitor. It is never sold, shared with advertising networks, or used to build a profile of an individual.

What We Do NOT Collect

We are committed to privacy-friendly analytics. We explicitly do NOT:

  • Set cookies or tracking pixels when someone clicks your links
  • Fingerprint browsers or devices
  • Build behavioural profiles, or track anyone from one site to the next
  • Sell or share visitor data with advertising networks or data brokers
  • Ask visitors for, or store, names, email addresses, or payment details

How We Use Your Data

Your data is used solely to:

  • Authenticate you and maintain your session
  • Store and manage your links
  • Display aggregated click statistics
  • Redirect visitors to your destination URLs

Data Security

We use industry-standard security measures to protect your data:

  • Passwords are hashed using bcrypt
  • All connections use HTTPS/TLS encryption
  • Data is stored in secure AWS infrastructure

Data Retention

Your account data and links are retained until you delete them or close your account. Individual click records are deleted automatically after roughly two years, and the address on each is reduced to its network prefix within an hour of the click. Aggregated daily statistics contain no address or user-agent and are retained for the lifetime of your account.

Your Rights

You can:

  • Access all your data through the dashboard
  • Delete individual links at any time
  • Delete your account from the settings page