# URL shorteners privacy ratings

Link shorteners and link management.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Shlink](https://privacyratings.com/url-shorteners/shlink/) | B (80/100) | Unknown | Self-hosted URL shortener with a REST API, command line tools, custom domains, QR codes and visit tracking. Managed through a separate web client or the API. |
| [YOURLS](https://privacyratings.com/url-shorteners/yourls/) | C (65/100) | Unknown | Self-hosted PHP URL shortener with a plugin system, an API, bookmarklets and click statistics for your own short domain. |
| [Dub](https://privacyratings.com/url-shorteners/dub/) | C (63/100) | United States (Five Eyes) | Open source link management platform for short links, QR codes, conversion tracking and affiliate programs. Available as a hosted service or for self-hosting. |
| [Kutt](https://privacyratings.com/url-shorteners/kutt/) | D (56/100) | Unknown | Open source URL shortener with custom domains, password-protected and expiring links, and link statistics. Can be self-hosted, and the developers run a hosted instance at kutt.to. |
| [Bitly](https://privacyratings.com/url-shorteners/bitly/) | F (31/100) | United States (Five Eyes) | Link management platform for creating short links, QR codes and landing pages, with click analytics and branded domains. |
| [TinyURL](https://privacyratings.com/url-shorteners/tinyurl/) | F (16/100) | United States (Five Eyes) | Long-running URL shortener that creates short links without an account, with paid plans for custom aliases, branded domains and link analytics. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?

Source: https://privacyratings.com/url-shorteners/