When a shortened link arrives by text or messenger, there is no way to tell where it
leads until you tap it. This app expands the link for you and shows the real
destination first.
■ What you see
· Where the shortened link ends up
· How many redirects it passes through
· Signals worth knowing (how recently the domain was registered, spelling close to a
known brand, a destination that does not match the organisation named in the message)
When nothing turns up, it says "No signals found."
That does not mean the link is fine — it means nothing we check for came up.
■ How it handles impersonation
When a message claims to be from your tax office or your bank, the app checks whether
the link actually belongs to that organisation. If it does not, it says so.
It does not rely on lists of already-reported addresses. Domains used for
impersonation are usually days old and have not reached any list yet.
■ Notification text stays on your phone
· Link addresses are not sent to our server
· What leaves your phone is the first 5 characters of a hash
· Addresses you check are kept in your history on this phone only. Entries are
deleted after 30 days, and you can turn history off entirely
· App data is excluded from backup and device-to-device transfer
· On a locked screen, notifications show the domain only
There are exactly two cases where an address is sent to the server, and both require
you to turn them on yourself. Neither is on by default.
■ Check a link inside the app
Paste an address, or a whole message, into the field on the home screen and it is
checked on the spot. Pasting the whole message also lets the app compare the
organisation the message names against where the link actually goes. Each check is
listed below the field, and tapping one brings the result back.
■ What it does not do
· It does not block links. Whether to open one is your decision
· It does not become your default browser
· It contains no ads and no analytics
· It has no accounts
■ Permission
Notification access is used to check links the moment a message arrives, so you are
not left waiting when you tap one. The text is read only to find links and is
discarded immediately.
You can skip the permission entirely and share links to the app instead.
See where a shortened link actually goes — before you tap it