Docs
Privacy and data retention
Last updated
When someone taps a Jumper link we count the tap and keep no IP address; the raw user agent is kept only when we cannot recognise the device, for 7 days. Redirects set no cookies, and everything is hosted on Cloudflare in the EU. The binding text is the privacy policy; this page is the short version.
What a tap leaves behind
- Counted: the day, the link, the device class (such as iPhone or Android, phone or tablet), the OS and its major version, the in-app browser, the store it went to, the country, the website the tap came from, and the
utm_*values on the link. - Visitor id: a hash of IP address and user agent made with a random salt that changes every day and is deleted after the day. It cannot be reversed and cannot link two days. It is used only to count unique visitors per link and day, and deleted after 2 days.
- Unrecognised devices: when we cannot tell the device or app, the user agent (never the IP address or the hash) is kept for 7 days to improve recognition, visible to Jumper staff only.
- Never stored: the IP address, a cookie, a fingerprint.
How long things are kept
| Data | Kept |
|---|---|
| Daily counts on free links | 30 days |
| Daily counts on paid and launch links | 2 years |
| Daily visitor hashes (for unique counts) | 2 days |
| User agents of unrecognised devices | 7 days |
| A link and its pages | While it runs, plus 14 days of grace and up to 12 months after it expires, so it can be renewed |
| Account email | While the account exists |
| Abuse reports (reporter email and IP hash) | 180 days |
Who processes the data is listed on the subprocessors page. To report a link, use the report form; the rules are in acceptable use.
Questions
Do you store IP addresses or user agents?
We never store IP addresses. When a link is tapped we read the IP address and user agent for an instant to tell the device apart, and keep only a daily hash of both, made with a random salt that is deleted after the day. The one exception: when we cannot tell which device or app a tap came from, we keep that user agent, without the IP address or hash, for 7 days to improve recognition.
Does the redirect set cookies?
Never. Redirect responses carry no cookies, are not cached, and send no referrer. The dashboard has one cookie, on its own address, that keeps you signed in.
Where is the data stored?
On Cloudflare in the EU jurisdiction. The subprocessors page lists every company that touches personal data.