Mork privacy policy and terms of use

Welcome to Mork ("this site"). So that you can use what we offer with confidence, this document sets out how we handle privacy and what your rights are. Please read it through.

This document is available in several languages as a convenience. Where a translation and the Traditional Chinese original disagree, the Traditional Chinese version is the one that applies.

Part one: privacy policy

1. Scope

This policy covers how we handle personally identifiable information collected while you use the site. It does not extend to sites we link to, nor to anyone we have not engaged or who is not involved in running the site.

2. What is actually collected

This section describes what the system records today, rather than what it might record in general.

When you create a short link or upload a file

The content itself: the target URL, or the image, video or audio you uploaded.
The options you set: password, password hint, expiry time, view limit and post.
The IP address you created it from.
A randomly generated anonymous identifier, so this browser can recognise which links it made. It is not connected to who you are, and Clear history in the sidebar replaces it at any time.

Passwords are stored as plain text, so that you can look one up on the management page if you forget it. Please do not reuse a password from another service.

When someone opens your short link

So that we can show you view statistics, each counted view records:

Time
The visitor’s IP address
Country, as reported by Cloudflare; left empty when it is not provided
The referring URL
The names of the browser, operating system and device platform
The visitor’s anonymous identifier, used to tell repeat visits apart so nobody is counted twice

The same visitor opening a link again does not add to the total. These records are shown only to the person who created the link, and are never published.

About browser fingerprinting

After a password-protected link is unlocked, the site runs a fingerprinting script (canvas and WebGL feature hashes). What that script sends is not currently stored by the server — the receiving end writes nothing. Some older browsers may still carry a b_fp cookie set by an earlier version of the site; where it exists it is associated with view records. The current code no longer creates it.

Data kept in your own browser

The following stays on your device, is never sent to the server, and is removed together by Clear history in the sidebar:

The list of links you have created.
The password, hint, expiry time and view limit remembered on the creation page, kept for four hours and reset each time you edit them.
Passwords you have used to open someone else’s protected link. These do not expire on their own; you decide when to clear them.

Member accounts

If you choose to sign in with a third-party account, we receive the basic identifying details that service provides — an email address, for example — and use them to recognise your account and the links you made.

3. How personal data is processed and used

When you visit the site or use a particular feature, we may ask for the personal data that feature needs, and we process and use it only for that stated purpose. We will not use it for anything else without your written consent.
When you use interactive features such as the service mailbox or a survey, we retain the name, email address and time of use that you provided.
To improve the service we compile statistics from the data collected. Beyond internal research we may publish those statistics and the commentary around them, but never anything that identifies an individual.
You can access your personal information and correct it at any time.

4. Retention periods

Uploaded files: kept for up to 30 days without an account. Signed in, you can choose "Forever" at creation time and the link will not expire on its own. Plain short links take up no storage and are not subject to this limit.
Once the deadline passes, or you delete a link by hand, that short link stops working immediately and nobody can open its content. What expires, however, is the link itself: the file remains in storage, and there is no automatic purge yet. If you need a particular file actually removed, tell us through the feedback form or write to [email protected].
View records are cleared of expired data manually and irregularly; there is no scheduled job for it yet.
Local records are yours to control, and the sidebar clears them at any time.

5. Protection of data

Our servers are protected by firewalls, anti-malware and the other security measures the site requires. Only authorised people can reach your personal data, everyone handling it has signed a confidentiality agreement, and a breach of that duty carries legal consequences.
Where we need to engage another party to provide a service, we require them to observe the same duty of confidentiality and we check that they do.
All traffic between the site and its users is encrypted with HTTPS.

6. Links to other sites

Pages on this site link out to other sites, and you can follow those links. This policy does not apply once you arrive there; consult the privacy policy of the site you have reached.

7. Sharing personal data with third parties

We do not provide, exchange, rent or sell your personal data to any individual, group, private company or public body.

The exceptions to the above include, but are not limited to:

Where you have given written consent.
Where it is necessary to avert danger to your life, body, freedom or property.
Where your conduct on the site breaches these terms, or may harm or obstruct the site or other users, and the site’s administrators determine that disclosure is necessary in order to identify or contact you, or to take legal action.
Where we engage a contractor to help collect, process or use your personal data, in which case we remain responsible for supervising them.

8. Third-party services

This site uses the following third-party services, each governed by its own privacy and data-use policies:

Google Cloud (App Engine): hosting.
Cloudflare: DNS, content delivery and protection, the Turnstile bot check, and R2 object storage, which is where your uploads live.
Google Analytics and Google Ads: traffic statistics and advertising measurement.
Google AdSense: the advertising shown on the site.
Cloudflare Web Analytics: traffic statistics.
cdnjs: loading front-end libraries.
Google, Facebook, GitHub and LINE: optional third-party sign-in.

9. Use of cookies

To provide the best service we place and read our own cookies on your computer. If you would rather not accept them, raising your browser’s privacy level will refuse them, though some features may then stop working — staying signed in, or remembering the links you created, for example. The third-party services listed above may also set cookies of their own.

10. User conduct

Everything on this site — links, images, audio and video among them — is supplied, uploaded and distributed by users themselves.

We accept no liability — direct, indirect, incidental, special, consequential or punitive — for any loss arising from using or linking to these pages, including but not limited to computer viruses, system failure, data loss, defamation, or infringement of copyright or intellectual property, and including loss of profit, goodwill, use, data or other intangible losses.

11. Changes to this policy

This privacy policy may be revised as circumstances require, and the revised text will be published on the site.

12. Deleting your data

You can ask for your data to be deleted by writing to [email protected], once your identity has been verified. You can also use Clear history in the sidebar at any time to break the link between this device and the records it holds, or simply delete the short links you created.

Part two: terms of use

Mork ("this site") provides its services under these terms. By visiting the site or using any of its features you confirm that you have read, understood and accepted all of them. If you do not agree, or if the country or region you are in excludes all or part of these terms, you should stop using the site immediately. Certain features may additionally be governed by terms or rules published separately for them, and those form part of these terms. We may amend these terms at any time and will publish the amended text on the site; please keep an eye on it. Continuing to use the site after an amendment means you have read, understood and accepted it.

1. Definitions

Terms used in this document:

User content: images, video and audio a user uploads, anything produced through the service, and any other material a user supplies.
Applicable law: the law of the country or region the user is in.
Copying: reproducing user content held on this site by any means, including downloading, screenshotting and photographing the screen.

2. Rules of use

Do not breach public decency or the law.

3. Handling content that breaks the rules

Where content a user has uploaded is reported as breaching these rules, we may delete it without notifying that user.

Where a user is found to be copying content held on this site, we may block that user without notifying them.

Whether reported content breaches these rules is determined by this site.

The right to establish, amend, update and finally interpret these terms rests with this service.

These terms were last revised on 2026-08-14