FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Analytics

SniffURL

AnalyticsOfficial website

SniffURL is a US link analytics and URL shortening platform that tracks clicks on shortened links, sets behavioural identifiers and requires GDPR consent before any non essential cookie is set.

Block SniffURL until consentScan my site
Overview

What does SniffURL do?

What is SniffURL

SniffURL is a US link analytics and URL shortening platform used by marketers, publishers and security researchers to create branded short links, track clicks and analyse the destination of suspicious URLs. It generates shortened URLs that route through a SniffURL domain, captures referral and device data on each click, and exposes dashboards or API endpoints to retrieve campaign performance. Because the redirect endpoint receives the visitor IP, user agent and referrer, and may set cookies for analytics, it falls under GDPR and ePrivacy.

What data and cookies does SniffURL collect

At redirect time SniffURL receives the source URL, the visitor IP address, the user agent, the referrer, the timestamp and any UTM parameters appended to the link. When the optional analytics SDK is embedded on the destination website, additional cookies such as sniffurl_visitor (visitor identifier) and sniffurl_session (session correlation) are written. The platform aggregates data into click counts, geographic distribution, device breakdown and campaign attribution.

GDPR and ePrivacy implications

The redirect itself can run without consent, but any cookie set on the destination site for analytics or campaign attribution is non essential and falls under Article 5(3) of the ePrivacy Directive. The CNIL, BfDI, AEPD and ICO require prior, freely given, specific and informed consent before any such cookie is set or read. The legal basis under Article 6(1)(a) GDPR is consent for the analytics SDK; the redirect logging may rely on legitimate interest where it is limited to security and abuse prevention, with appropriate transparency.

International data transfers

SniffURL is a US vendor processing click data on US cloud infrastructure. Transfers from the EEA require Standard Contractual Clauses and a transfer impact assessment, supplemented by EU US Data Privacy Framework certification of the entity when applicable. Document SniffURL as a processor and consider whether the IP address logging needs to be truncated before storage in the EU to limit the scope of the transfer.

Practical compliance steps

Block the SniffURL analytics SDK in your CMP until consent is captured. Do not load any tracking pixel on the destination page before acceptance. For redirect logs, apply data minimisation, truncate IPs where possible, document the security or analytics legitimate interest, and align retention rules with your other analytics tools. Sign SCCs with the vendor, run a transfer impact assessment, and add SniffURL to your record of processing activities.

Compliance

SniffURL and the GDPR

SniffURL is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Article 6(1)(a) GDPR (consent) for analytics cookies and behavioural click tracking. Article 5(3) ePrivacy Directive requires prior consent for non essential identifiers.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Article 5(3)), CNIL France, BfDI Germany, AEPD Spain, ICO UK PECR

Impact assessment (DPIA)

Medium risk. DPIA recommended when SniffURL is deployed at scale to track campaign performance combined with personal identifiers. Click tracking on outbound links should be evaluated against ePrivacy.

Sample text for your banner

We use SniffURL (link analytics and URL shortening, US vendor) which records clicks on shortened links and may set identifiers. Without your consent these identifiers are not set or read.
Cookies and trackers

What SniffURL sets and contacts

Tracking method
JavaScript SDK, server side analytics, link cloaking and tracking pixels for shortened URLs
Server location
United States and global cloud (vendor primarily uses US infrastructure for analytics ingestion)
Cookieless mode available
Yes
Data transferred outside the EU
SniffURL is a US vendor processing click data on US cloud infrastructure. Transfers from the EEA require Standard Contractual Clauses and a transfer impact assessment.

Cookies set (2)

NameTypeDurationPurpose
sniffurl_visitorfirst_party12 monthsVisitor identifier set by the optional analytics SDK on the destination site to recognise returning users.
sniffurl_sessionfirst_partysessionSession correlation identifier used to group click events within the current visit.

Third-party domains contacted (3)

  • sniffurl.com
  • cdn.sniffurl.com
  • analytics.sniffurl.com
Questions

Frequently asked questions about SniffURL

Can't find your question? Write to us, we answer fast.

Which cookies does SniffURL set?

SniffURL itself does not set cookies during the redirect, only logs the click server side. When the optional analytics SDK is embedded on the destination site, cookies such as sniffurl_visitor (visitor identifier) and sniffurl_session (session correlation) are stored on the publisher domain.

Is consent required to use SniffURL in the EU?

Consent is required for any non essential cookie set by the optional analytics SDK on the destination site, in line with Article 5(3) of the ePrivacy Directive. The redirect logging itself can be operated under legitimate interest where it is limited to security and abuse prevention.

What is the legal basis for processing through SniffURL?

Article 6(1)(a) GDPR (consent) is the appropriate basis for the analytics SDK and any campaign attribution cookie. Article 6(1)(f) (legitimate interest) may support redirect logs limited to security and abuse prevention with transparent privacy notices.

Does SniffURL transfer data to the United States?

Yes. SniffURL processes click data on US cloud infrastructure. Transfers from the EEA rely on Standard Contractual Clauses and a transfer impact assessment, supplemented by EU US Data Privacy Framework certification when applicable.

Do I need a DPIA for SniffURL?

A DPIA is recommended when SniffURL is used at scale to track campaigns or combined with personal identifiers. For purely security focused link analysis on a small footprint, a documented legitimate interest assessment may be sufficient.

How do I implement SniffURL in a GDPR compliant way?

Block the SniffURL analytics SDK in your CMP until consent. Apply data minimisation to redirect logs, truncate IP addresses where possible, sign SCCs with the vendor, run a transfer impact assessment, document SniffURL in your record of processing activities and align retention rules with your other analytics tools.

Are there alternatives to SniffURL?

Privacy friendly link analytics alternatives with EU hosting include Bitly EU, Rebrandly, Short.io, Plausible link tracking, and self hosted YOURLS or Polr. Choose based on residency, vanity domain support and security analysis depth.

How should I update my cookie policy for SniffURL?

Disclose any SniffURL cookies set on the destination site (sniffurl_visitor, sniffurl_session), state the link analytics or security purpose, mention the data processed (IP, user agent, referrer, UTM parameters), name the SniffURL vendor as US processor, mention SCCs and link to the consent withdrawal mechanism.

Same category

More services: Analytics

See the whole category

Trackify X

Trackify X is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Trackify X supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Trackify X enables informed decisions that improve experience and drive results.

Analytics

Stellantis

Stellantis is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Stellantis integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Stellantis helps organizations maintain robust websites that meet user expectations and technical requirements.

Marketing

Say.ac

Say.ac is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Say.ac supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Say.ac enables informed decisions that improve experience and drive results.

Analytics

Beezer

Beezer is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Beezer offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Beezer empowers organizations to optimize strategy and maximize return on investment.

Analytics

Weberlo

Weberlo is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Weberlo supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Weberlo enables informed decisions that improve experience and drive results.

Analytics

Tealium AudienceStream

Tealium AudienceStream is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Tealium AudienceStream supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Tealium AudienceStream ensures your website delivers a smooth, uninterrupted experience to every visitor and.

Analytics

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site