Last updated: 2026-06-18
Changes since the previous version (2026-06-01)
Welcome to sitecite! In this document we lay out how your data is handled on the official sitecite instance at sitecite.dantenl.com. By default, self‑hosted instances should work the same way, but we cannot guarantee that. This privacy policy applies to the official sitecite instance, as well as to the official sitecite browser extension for Firefox and Chrome.
sitecite is an open‑source project. You can review the source code on GitHub.
sitecite is operated by Dante. You can contact me at sitecite@dantenl.com. For the data protection purposes, I am the data controller.
All personal data we store is either provided directly by you or received from a third‑party sign‑in service at your direction. We do not use analytics. The data you provide (or that we receive) includes, but is not limited to:
Browser extension: The official extension sends the URL of the page you want to shorten and any text you quote to our servers. It does not collect your browsing history, search queries, or any information from pages where you haven't clicked the extension.
We never sell, rent, or trade your personal data to third parties.
We use strictly necessary cookies to keep you signed in. These are HTTPS‑signed cookies that last for a maximum of one hour. We do not use cookies for tracking or advertising, and no third‑party cookies are placed by our service.
When you sign in with your Google account, sitecite accesses the Google API Services to retrieve only your Google account ID – a unique number generated by Google. We do not access your name, email address, profile picture, contacts, or any other Google user data.
How we use this Google user data:
Storage: We store your Google account ID on our servers. This is the only Google user data we keep.
Sharing: We do not share your Google account ID with any other users, third parties, or services. It remains strictly within sitecite.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you sign in with Discord, we access and store your Discord account ID for the same purposes (authentication, account linking, and security). We do not access any other Discord profile information. Please review Discord's privacy policy.
We use trusted third‑party services to help run sitecite. They process data on our behalf and are bound by data processing agreements.
We use Cloudflare, a content delivery network and security service, to keep sitecite fast and protected against attacks. When you use the website, Cloudflare may process your IP address and technical browsing information. This is necessary for performance and security purposes.
Cloudflare may transfer data to servers outside the European Economic Area or the UK. They use approved legal safeguards (such as Standard Contractual Clauses) to protect your information.
You can read Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/ .
Under UK and EU data protection law, we process your personal data on these grounds:
We retain your account information and the content you create (shortened links, quoted text, preferences) for as long as your account is active. If you delete your account or request deletion of your data, we will remove all personal data within 30 days. We may keep anonymised or aggregated information that can no longer be linked to you.
You have the right to:
To exercise any of these rights, email us at sitecite@dantenl.com. You can also reach out via our Discord server, but we may still need to confirm your identity through email to protect your account. We may ask you to verify that you are the account owner, for example by confirming the email address linked to your account or providing other account‑specific details.
If you signed up on an instance that is not the official sitecite instance, please contact the operator of that instance directly – they are the data controller for your data.
If you are based in the UK or the EU and you believe we have not handled your data correctly, you also have the right to lodge a complaint with your local data protection authority.
We implement technical and organisational measures to protect your personal data, including HTTPS encryption in transit and salted password hashing. While we take care to secure your data, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Our servers are located in the United Kingdom. If you access sitecite from outside the UK, your data will be transferred to and processed in the UK. By using the service, you consent to this transfer. The UK has been recognised by the European Commission as providing an adequate level of data protection, which means that transfers from the EU to the UK are permitted without additional safeguards.
sitecite is not intended for anyone under the age of 13 (or the applicable age of digital consent in your country, if higher). We do not knowingly collect personal data from children. If we discover that a child under 13 has provided us with personal information, we will delete it as quickly as possible.
We may update this privacy policy from time to time. When we make changes, we will revise the “Last updated” date at the top of the page. For significant changes, we will provide a more prominent notice, such as a banner on the website. We encourage you to review this page periodically.
By using sitecite (the website and the extension), you acknowledge that your data is stored and processed in accordance with this privacy policy. We try to store your data carefully, but mistakes can happen and storing data is never without risk. We ask you to take care of your own account security as well.
For any other legal‑related questions, please contact us at sitecite@dantenl.com and also review our terms of service.