Link analytics necessarily involve visitor data. The controls here decide how much of it is kept and for how long.
What a click records
Country, region, city, timezone, continent, browser, OS, device, language, referrer, UTM values, and — unless you turn it off — the visitor's IP address along with its ASN and network. The full list is visible in the click stream, and the same fields go into the S3 export.
Hide visitor IP
Turn this on in Domain settings, Statistics, and the IP is used to derive country and city and then discarded. It is never stored. Recommended for GDPR, and it costs you nothing except the ability to exclude a specific address after the fact.
Set the IP exclusion list first if you use it — exclusions are matched at click time and work regardless of whether the address is stored afterwards.
Retention
Click data is kept for a bounded number of days that grows with the plan, and indefinitely on Scale. Retention is the setting most worth deciding deliberately: keeping less reduces your exposure, keeping more gives you year-on-year comparisons. If you need a short retention window for policy reasons but long-term aggregates for reporting, use the daily S3 export and keep the aggregates on your side.
Consent
A redirect gives you no opportunity to ask for consent. That matters for the per-link and per-domain tracking pixels and the ad-platform conversion APIs, which are what regulators care about — not the click counting. In the EU and UK, take advice before enabling retargeting on links seen by European visitors.
Deleting data
Delete statistics removes a domain's click history while leaving the links intact. Deleting a link deletes its clicks with it. Both are irreversible.
An individual can export everything held about their account from profile settings, and delete their account from the same place.
The audit log
Administrative actions are recorded with user, entity and IP. This is a security control rather than visitor data, and it is the evidence trail when you need to explain who changed what.
Domains and abuse
Destinations are checked against a global abuse blocklist at creation, and a domain can restrict destinations to an allowed list of hostnames — useful when several people can create links and you do not want your brand pointing at arbitrary sites.
Find this in your dashboard
- Sign in and select the workspace and domain you want to manage.
- Open Branded Links. Review the article’s steps and your plan’s available controls.
- Save your changes, reopen the record and verify the saved result. For routing changes, check the short link with a test visit.
