Company
Terms of service
The rules for using Xlyl, in the plainest language we can manage: what you may shorten, what gets a link removed, what is promised about keeping it running, and what is not.
Who these terms are between
These terms cover your use of the service at xlyl.link, and your agreement is with Soqode Digital Pvt Ltd.
Using the service means accepting these terms. If you do not accept them, do not use it.
What you may and may not shorten
The rule
Shorten anything lawful where you are, and lawful where your readers are, and do not use a short link to make a destination look like something it is not.
What will get a link removed
These are removed on sight, without notice, and the account behind them is closed:
- Malware, ransomware, and anything that installs software a visitor did not ask for.
- Phishing and credential harvesting, including pages that impersonate a bank, a mail provider, a government service or anyone else.
- Child sexual abuse material, without exception.
- Content that incites violence against people, or that is unlawful in the jurisdiction the service operates from.
- Bulk links created for unsolicited messaging — the usual pattern behind a domain ending up on a blocklist.
- Links whose surrounding presentation deliberately misleads about the destination.
Anyone can report a link, and reports are acted on. A single abusive link can get a whole domain flagged by browsers and mail filters, which harms every honest user of it — so this is enforced for selfish reasons as much as ethical ones.
Destinations are not endorsed
A short link is a redirect to a page this service does not control, has not reviewed and is not responsible for. Where a Google Safe Browsing key is configured, destinations are checked against known malware and phishing lists when links are created, but that check is not a guarantee and is not a substitute for judgement.
Accounts
You are responsible for what happens under your account, including anything done with an API key you generated. Keep the password and the key to yourself; the key carries full access to your links, and regenerating it revokes the old one immediately.
One person or organisation, one account. Accounts exist to hold links, not to be resold as a service to others.
Anti-abuse limits apply to creating links: 50 links per account in any rolling 24 hours; 60 link creations per 15 minutes, counted per account or, without one, per IP address; a 10-minute cooldown between links created without an account from one address. These are documented on the free-tier page and are not negotiable per account.
Your links and your data
Your links belong to you. So do the statistics attached to them. Your account page downloads a CSV of your links; each link's clicks download as a CSV from the dashboard (the last 90 days) or through the API (up to 365 days or 50,000 rows), and statistics are available through the API. There is no single download of everything. You can delete any of it at any time. Deleting your account removes your links and their statistics immediately.
What is recorded and what deliberately is not is set out in the privacy policy — in short: no visitor IP addresses, no cookies on visitors, and a row per click on account links that describes the click rather than the person.
If a link matters to you beyond the lifetime of any service, put it on a domain you own. Then, if you leave, you can keep the same addresses by recreating the links — the same aliases and destinations — on another service and moving the domain's DNS and HTTPS to it.
What is promised, and what is not
Availability
The service is free, and it is provided as it is. There is no uptime guarantee, no service-level agreement, no support contract and no promise that any feature will still exist next year. It is run with care, and it is not run with a pager rota.
For anything where an outage would be expensive, the honest advice is to use a commercial service with a contract behind it — the comparison pages are candid about which situations call for that.
Liability
To the fullest extent the law allows, the operator is not liable for losses arising from use of the service or from being unable to use it — including lost revenue, lost data or business interruption — and total liability is limited to what you paid for the service, which is nothing. Some jurisdictions do not allow such limits, in which case they apply only as far as they legally can.
Affiliate links
Links that the site's administrators create to Creative Market or MyFonts are sent through the operator's Commission Junction affiliate links, and their links to ThemeForest through the operator's Envato affiliate link. Other users' links are never rewritten: they go exactly where they were saved. The privacy policy has the details.
Changes
These terms may be revised. Material changes will be reflected here with a new date, and continuing to use the service after a change means accepting the revised version.
Last updated: 23 September 2026.