Security

1. Infrastructure Security

SnipURL operates on Cloudflare's globally distributed edge network, providing:

• DDoS protection and edge security
• Automatic HTTPS/TLS encryption for all traffic
• KV edge storage for ultra-fast redirect serving
• D1 database encryption at rest and in transit
• Regular security audits and compliance monitoring

2. API Key Management

• Never share API keys in public repositories or client-side code
• Rotate keys regularly and revoke old ones immediately
• Use separate keys for different environments (dev, staging, production)
• Monitor API key usage logs for suspicious activity
• Set rate limits and IP whitelisting where possible

3. Link Protection

• Password Protection: Protect links with passwords requiring visitors to enter credentials before redirecting
• Expiration Scheduling: Automatically disable links after a specified date and time
• Link Deactivation: Manually deactivate links at any time through the dashboard
• Spam Detection: Our system automatically blocks known malicious and phishing URLs

4. Data Privacy

• Encrypted storage in D1 database with AES-256 encryption
• Analytics data collected securely and stored separately
• IP addresses and device information anonymized after 90 days
• No third-party data sharing without explicit consent
• GDPR and privacy regulation compliance

5. Malware & Phishing Detection

• Real-time URL validation using industry-standard threat databases
• Automatic blocking of known malware and phishing URLs
• User reporting system for suspicious or abusive links
• Admin review process for flagged content

6. Incident Response

• We will investigate and remediate the issue immediately
• Affected users will be notified within 48 hours
• Detailed incident reports will be provided
• Remediation steps and preventative measures will be shared