Skip to content

S!NGKAT

Creator & Sole Developer

Personal URL shortener with click analytics — a private dashboard over public links, with referrer, country and device breakdowns per link.

Next.jsTypeScriptTailwindPostgreSQLSupabaseBetter AuthGSAP

What it does

  • Slugs live at the root of the short host: one indexed lookup, a 307, and the click recorded after the response is sent.
  • Per-link analytics over 7, 30 or 90 days — daily chart, top referrers, top countries, device split, recent clicks, CSV export.
  • Bot traffic is tagged rather than dropped, and aggregates exclude it; no raw IP is stored, only a per-UTC-day salted SHA-256.
  • Rate-limited redirects (60/min per IP, 429 with Retry-After), a branded 404 for unknown slugs, and destination validation that rejects credentials and private address ranges.

The redirect path

  1. Request

    A short link is requested at the root of the short host.

  2. Rate limit

    60 requests a minute per IP; past that it answers 429 with Retry-After.

  3. Validate

    The destination is checked, and credentials and private address ranges are rejected.

  4. Look up

    One indexed lookup by slug.

  5. Redirect

    A 307 to the destination. An unknown slug gets a branded 404.

  6. Record

    The click is recorded after the response has been sent.

  7. Classify

    Bot traffic is tagged rather than dropped, and aggregates exclude it.

  8. Store

    No raw IP is kept — only a per-UTC-day salted SHA-256.

Case study 1 of 3