Creating links
WebYore stores an irreversible hash of network identifiers associated with requests for quotas, security, and abuse prevention. Anonymous visitors also receive a signed browser identifier and management credential without creating an account.
Click analytics
Short Link clicks record time, country or region, device class, and referrer domain. Irreversibly hashed identifiers used for daily visitor deduplication are retained for 32 days. Hourly analytics aggregated by those dimensions are retained for 100 days. Lifetime click and daily-unique visitor counters remain while the link exists. Analytics are available only to the link owner.
Accounts and API
Registration and sign-in store your email, verification state, login-provider identifier, account plan, irreversible API-key hashes, usage, and entitlement records. Passwords are stored only as Argon2id hashes produced by the private service. Email verification, password reset, and Magic Link credentials are stored only as expiring irreversible hashes. API key plaintext appears once at creation. Sessions use Secure, HttpOnly, SameSite cookies.
Hosted Images
Source images uploaded by verified accounts are temporarily held in private storage. After format validation, conversion, and metadata removal, they are served from random, non-indexed URLs. When automated content rating is enabled, images are processed only on WebYore-operated private infrastructure and are not sent to a third-party model service. The Cloudflare Access-protected operations interface may list recent image identifiers, public state, dimensions, and ratings, but does not show uploader accounts, email addresses, or original filenames in that list. Limited report metadata, details voluntarily supplied by the reporter, and a non-previewing review link that expires after two hours may be sent to a controlled private Discord channel for authorized members; image files are never attached to Discord. Model results, uploader declarations, operator reviews, reports, and takedowns remain separate auditable facts.
Snapshot data
Snapshots retain the public appearance, text, and necessary media available at creation time. Source HTML remains in private storage and is removed under the retention policy, except for audit retention required by legal, privacy, copyright, or security investigations.
Reports
A reporter may optionally provide an email address. Closed normal- and high-priority cases, handling events, and necessary audit records are retained for no more than 365 days. Sent internal-notification records are retained for no more than 90 days. Critical cases follow a manual legal disposition or preservation requirement and are not deleted by the ordinary scheduled cleanup.