# Gozi.to

> Gozi.to is a free URL shortener with click analytics. Anyone can shorten a link with no
> account; a free account adds custom short links, links that never expire, a dashboard,
> CSV export and a REST API. There is no paid tier, no trial and no credit card.

Short links look like `https://gozi.to/aB3dK9x`. They answer 302 Found with `X-Robots-Tag: noindex`
and set no cookies. Redirects are never 301, so that clicks keep being counted. The whole
product, API and policies in one document: [llms-full.txt](https://gozi.to/llms-full.txt).

This is the id edition: the links below point at the id pages. The text of
this file and of llms-full.txt is English.

Contact and abuse reports: hello@gozi.to

## Product

- [Create a short link](https://gozi.to/id/): paste a long URL, get a gozi.to link, a QR code and a private stats page. No sign-up. Links made without an account expire after 90 days.
- [API documentation](https://gozi.to/id/docs): REST over HTTPS, `Authorization: Bearer gz_…` keys, create/list/edit/delete links and read click statistics.
- [OpenAPI 3.1 description](https://gozi.to/openapi.json): every public endpoint, its request and response shapes and its error codes.
- [Report a link](https://gozi.to/id/report): report phishing, malware, spam, scams or illegal content behind a gozi.to link.

## Policies

- [Privacy](https://gozi.to/id/privacy): no visitor IP addresses are stored, no cookies are set on redirects, click data is anonymous and aggregated (country, device, browser, OS, referring domain, bot flag).
- [Terms of use](https://gozi.to/id/terms): acceptable use, and what causes a link to be disabled.
- [Security contact](https://gozi.to/.well-known/security.txt): how to report a vulnerability.

## Writing

- [Blog](https://gozi.to/id/blog/): notes from the person who runs Gozi.to. [RSS](https://gozi.to/id/blog/feed.xml).

## Facts

- Anonymous limits: 25 new links per IP per day, 5 per minute, links expire after 90 days, and a Cloudflare Turnstile human check is required — so anonymous creation cannot be scripted.
- Account limits: 500 new links per day, 60 API requests per minute per key, up to 10 API keys, links never expire.
- Destination URLs are limited to 2048 characters and must be http or https. Raw IP addresses, private hostnames and other link shorteners are refused.
- Every destination is checked against Google Safe Browsing when the link is created and re-checked afterwards. Links reported by 3 different people are put behind a warning page automatically.
- Click statistics cover the last 90 days in detail plus a lifetime total. Figures are sampled estimates, not exact counts.

## Optional

- [Sitemap](https://gozi.to/sitemap.xml): Gozi.to is published in 25 languages. English is at the root; every other language uses a path prefix — https://gozi.to/fr/, https://gozi.to/ja/, https://gozi.to/zh-CN/. Available: en, ar, cs, de, el, es, fa, fr, he, hi, id, it, ja, ko, ms, nl, pl, pt, ru, th, tr, ur, vi, zh-CN, zh-TW.