Changelog
Everything we ship, in order.
- ai
AI slug and tag suggestions
The create dialog now suggests readable slugs and relevant tags from the destination page. Regenerate for more, or ignore them entirely.
2026-09-08 - billing
INR billing with UPI and netbanking
Indian customers are now billed in rupees through Easebuzz, with UPI, netbanking, cards and wallets, and GST-compliant invoices.
2026-09-08 - pricing
Four paid plans, all self-serve
Starter is $4 a month (₹332 in India), and Scale is $140 with unlimited links, clicks, domains and team members. Every tier is on the pricing page with its own checkout — none of them is hidden behind a sales call.
2026-09-08 - release
ShortFreeURL 1.0 is live
The full platform ships today: fourteen-tab link editor, QR studio with AI artwork, click stream analytics, link bundles, posts, teams, SSO, webhooks and an MCP server.
2026-09-08 - New
Geo rules for states and cities (v2.14)
Geo-targeting now has four rule types — continent, country, state or region, and city — evaluated most specific first. · Region and city pickers cascade from a country, and accept free text when a name is spelled differently in your data. · Preview any rule from anywhere with ?ms_geo=IN, ?ms_geo=IN-MH or ?ms_geo=IN-MH/Pune. Previews never count as clicks and never fire webhooks or pixels. · Rule sets can be saved as geo templates and applied to other links.
2026-09-02 - Improvement
Editor tabs you can hide and reorder (v2.13)
The SHOW TABS popover adds a checkbox and a drag handle per tab. Basic link editing stays first and cannot be hidden. · The layout is stored on your profile, so it follows you to every link on every device. · A reset option restores the default order and unhides everything.
2026-08-19 - New
Daily S3 click export (v2.12)
A domain can write its raw click stream to your own object storage as one newline-delimited JSON file per day. · One row per click with the same fields the click stream shows, including geo provenance and click identifiers. · Set the bucket in Domain settings and the IAM role ARN in Organization settings.
2026-07-28 - New
MCP server for AI assistants (v2.11)
An MCP endpoint exposes create_link, search_links, link_analytics and domain_analytics over JSON-RPC. · Authentication uses an ordinary API key, so a key scoped to one domain limits an assistant to that domain. · Tools return both a readable summary and structured content.
2026-07-08 - Improvement
Server-side conversion APIs for more platforms (v2.10)
Added Reddit, Snapchat, Pinterest and X to the existing GA4, Meta, TikTok, LinkedIn, Google Ads and Segment destinations. · Ad-platform click identifiers are read off the incoming request and forwarded: gclid, fbclid, ttclid, twclid, ScCid, rdt_cid, li_fat_id, msclkid, epik and igshid. · Every destination runs after the response is sent, with its own timeout, so one failing never delays a redirect. · Each attempt is recorded in the delivery log with its status and response.
2026-06-17 - New
Registrar and DNS automation (v2.9)
Connect the registrar or DNS host holding your domains and both records are written for you over the provider API. · Providers are marked automatic or guide; guide providers get panel-specific instructions instead. · Push rewrites the records for a domain whose DNS has drifted. · Credentials are encrypted at rest and never returned to the browser.
2026-05-26 - Security
Signed redirects (v2.8)
Enabling signing on a domain adds ms_sig, ms_exp and ms_alg to every destination URL, signed with HMAC-SHA3-512 and valid for ten minutes. · The settings panel shows verification examples for several languages. · Regenerating the signing key invalidates the previous one immediately.
2026-05-06 - New
The bulk sheet (v2.7)
An in-browser grid over the canonical bulk columns, with no spreadsheet account required. · A row with an Id updates a link, a row without one creates a link, and 1 in the Delete column removes one. · Applying a sheet reports created, updated, deleted and failed counts with per-row errors. · The same layout downloads as CSV for offline editing.
2026-04-14 - Improvement
Statistics filter values come from your own data (v2.6)
The filter dialog now lists only values present in your clicks, so you cannot filter to a country that has never clicked. · Filters persist across the statistics page, the click stream and conversions. · Free plans keep the date range and the human/bot mode; dimension filters remain a Pro feature and now say so instead of hiding the controls.
2026-03-24 - New
Conversion tracking (v2.5)
Turning on conversion tracking appends a clid parameter to every redirect. · Report conversions back server-side with POST /api/conversions, or with a 1x1 pixel for pages you cannot add code to. · A click is marked completed on first attribution, so a refreshed thank-you page does not report twice. · Conversions appear per link, on the statistics page and on their own page with source, value and location.
2026-03-03 - New
Link bundles and markdown posts (v2.4)
A bundle is a link-in-bio page living on a short link of its own, with buttons whose clicks are counted individually. · A post is a markdown page on a short link, with draft and published states. · Both use the domain theme, so 404, expired, password, bundle and post pages all match your brand. · The link editor gained a Link bundle tab for adding a link as a button.
2026-02-11 - Improvement
Search syntax in the links table (v2.3)
Field search: path, title, url, tag, folder, by, clicks, created, updated, expires, archived, cloaking, encrypted and redirecttype. · Comparison operators on clicks and dates, quoted values for phrases, and expires:none for links with no expiry. · Using archived: anywhere in a query turns off the default filter that hides archived links. · The same syntax is accepted by the API and by the MCP search tool.
2026-01-27 - New
Folder defaults (v2.2)
A folder can carry a redirect type, QR style, tracking snippet, all five UTM values and an auto-delete period. · Links created in the folder inherit those values unless the request sets its own. · Defaults apply at creation; changing a folder later does not rewrite existing links.
2026-01-08 - Improvement
QR studio rebuilt (v2.1)
Eight themes, separate foreground, background and eye colours, finder and module styles, corner radius and a caption. · Centre logos raise error correction to H automatically. · Downloads as PNG at 512 or 2048, SVG and PDF. · Publish a permanent image URL with an embed snippet, revocable from the QR codes page.
2025-12-10 - New
Teams, roles and per-link permissions (v2.0)
Teams own a subset of domains, so only their members see those domains in the switcher. · Four roles: owner, admin, user and readonly, with write endpoints returning 403 for readonly members. · A link can be restricted to named members; anyone else gets 404 rather than 403 so the link does not disclose that it exists. · Ownership transfer demotes the previous owner to admin in the same action.
2025-11-19 - Security
SAML single sign-on and passkeys (v1.19)
SAML is configured per team with an entry point, certificate, entity ID and ACS URL. · Passkeys can be registered and labelled per device, alongside authenticator-app two-factor and backup codes. · A team can require two-factor authentication for its members. · Sessions are listed and can all be revoked except the current one.
2025-10-29 - New
Encrypted links (v1.18)
The destination is encrypted with a key returned once and never stored; it travels in the URL fragment, which browsers do not send to servers. · The server cannot read the destination, and neither can anyone with database access. · Encryption is chosen at creation and cannot be added or removed afterwards.
2025-10-07 - Improvement
Social preview pages for crawlers (v1.17)
A preview crawler on a link that has Open Graph, X card or App Links values is served those tags instead of a redirect. · Links with no social metadata still redirect, so the destination keeps control of its own card. · The Social media tab gained autofill from the destination page and the full set of secondary Open Graph and player-card fields.
2025-09-16 - New
Click stream with live tail (v1.16)
One row per request, newest first, with column groups covering identity, location, network, client and traffic. · Live tail refreshes the top of the stream every five seconds. · Export the filtered stream as CSV, and open any click for its full record.
2025-08-26 - New
A/B testing and rotation (v1.15)
Up to ten weighted variations per link, with the main destination taking the remainder. · Visitors are assigned once and kept on the same variation by a cookie for thirty days. · Rotation mode cycles destinations round-robin and sets no cookie. · Clicks record the variation served, and statistics gained an A/B variations card.
2025-07-30 - New
CSV import with column mapping (v1.14)
Preview a file before importing: detected headers, the field each maps to, the row count and the first twenty rows. · Templates recognised for Bitly, Rebrandly, TinyURL, Cutt.ly, Short.io and a generic layout. · Failed rows download as a CSV with the error attached, so only those need re-importing. · Imports are capped at 10,000 rows per file.
2025-06-24 - New
Bitly fallback resolution for migrations (v1.13)
While enabled, a slug this instance does not recognise is looked up against your old domain, redirected and cached. · Links created after your export keep working during the switch instead of returning 404. · The click stream shows which requests are still being served by fallback, so you know when it is safe to turn off.
2025-05-20 - Improvement
Domain settings reorganised into tabs (v1.12)
Eleven tabs: redirects, slug generation, UI customization, QR defaults, statistics, tracking, deep links, robots policy, destination restrictions, signature key and S3 export. · Subpath rules send whole paths elsewhere before slug lookup. · The theme editor now covers every visitor-facing page — 404, expired, password, encrypted, bundle and post.
2025-04-15 - New
Mobile deep links (v1.11)
assetlinks.json and apple-app-site-association are served automatically once the app identifiers are set on a domain. · Per-link Android intent fields: package name, intent action and component, with the web destination as the fallback. · Separate iOS and Android destinations on any link.
2025-03-18 - New
Click webhooks (v1.10)
Every click can be POSTed as signed JSON to your own endpoint, after the visitor has already been redirected. · Verify the X-ShortFreeURL-Signature header before trusting the body. · A test event button and a delivery log showing status and response for recent attempts.
2025-02-18 - Improvement
Bot classification and IP exclusions (v1.9)
Every request is logged and classified afterwards rather than filtered at write time, so a surprising number can be explained. · Bot filter levels: off, standard and strict. · An IP exclusion list per domain stops office and VPN traffic being recorded at all. · Statistics report total clicks and human clicks as separate figures.
2025-01-21 - New
Password protection and link expiry (v1.8)
A password gate with a signed per-link cookie and an optional contact address for people who do not have the password. · Expiry by date, by click limit, and a TTL that deletes the link entirely. · An optional fallback destination for expired traffic, replacing the themed expired page.
2024-11-26 - New
API keys, scopes and the OpenAPI document (v1.7)
Secret keys with full access and public keys that can only create links, each scoped to all domains or one. · Optional expiry dates, with active, expiring and expired statuses in the key list. · GET /api/openapi.json returns a specification generated from the live routes. · Key creation and revocation are recorded in the audit log.
2024-10-15 - Fix
Query merging and UTM handling (v1.6)
Parameters on a short link are appended to the destination unless the link opts out; ?ms_nomerge=1 skips merging for a single request. · UTM values are applied after merging, so a link default no longer overwrote a parameter supplied on the click. · Fixed destinations with existing query strings losing their parameters when UTM values were applied. · The campaign tab now previews the final URL as you type.
2024-08-20 - New
Custom domains with automatic SSL (v1.5)
Connect a domain with an A record and a www CNAME; SSL is issued automatically once the records resolve. · Domain states of pending, extra records and active, with the A records currently seen shown next to the expected value. · Free subdomains on a shared base domain, with a reserved-name list and email or phone verification required before claiming one. · Main page redirect and 404 redirect per domain.
2024-06-25
Frequently asked questions
How often does ShortFreeURL ship?
Continuously. Everything released is listed here, newest first, with the date it landed.
Will an update break my links?
No. A short URL keeps working for as long as it exists; releases add behaviour behind it rather than change the URL.