Platform Security

1. Transport & Infrastructure Security

All web traffic, API requests, and short link redirects are encrypted using HTTPS and modern TLS protocols. Our infrastructure is protected by Cloudflare, providing DDoS mitigation, bot management, and Web Application Firewall (WAF) protection at the network edge.

2. Official Brand Domains

Always verify the domain origin when creating links or visiting short aliases. Our platform operates exclusively on these official domains (or their subdomains):

• · URLd.me (URL'd me!) — Primary platform, backend, API endpoints, and primary short link domain.
• · URLsh.in (Ur Link shortener) — Our backup domain and server. Serves short link on Free plans.
• · uGo.Li (U Go Link) — Extra-short premium domain for our customers in MEGA and above plans.

3. Authentication

We use trusted third-party identity providers for authentication, allowing you to sign in securely without creating or managing a separate password.

• · Secure OAuth authentication via supported identity providers (such as Google, Microsoft, and Yahoo).
• · Secure session cookies with appropriate security attributes to protect authenticated sessions.
• · Cross-Site Request Forgery (CSRF) protection on authenticated requests.
• · Two-factor authentication (2FA) with time-based one-time passwords (TOTP), compatible with your preferred authenticator app.

4. Google Safe Browsing & Threat Mitigation

To prevent our short links from being misused for phishing, malware, or spam, destination URLs are checked against Google Safe Browsing prior to creation whenever applicable. If a destination is later identified as malicious or harmful, access may be suspended or blocked to help protect visitors.

5. Data Protection

We minimize the amount of personal information we collect and retain, reducing both risk and complexity.

• · Passwordless authentication — we never store or manage user passwords.
• · Minimal collection of personal information required to provide the service.
• · Privacy-first architecture designed to reduce unnecessary data retention.

6. Abuse Protection

Multiple layers of automated protection help safeguard our platform from abuse while maintaining reliable service for legitimate users.

• · Rate limiting to mitigate excessive or abusive requests.
• · Automated detection of suspicious or malicious activity.
• · Spam prevention measures to help maintain the integrity of our platform.

7. Secure by Design

Security and privacy are built into URLd.me from the beginning — not added as an afterthought. We collect only the information necessary to operate the service, continuously monitor for abuse, and design our systems to protect both our customers and the visitors who use their links.

8. Security Disclosure

If you believe you've discovered a security vulnerability, please report it with details. We appreciate responsible disclosure and will investigate all legitimate reports promptly.