How it works.

A short link is a row in a database: a code, the address it leads to, and a few counters. Here is everything else.

What a click records: The day it happened, whether it came from the QR code, the site it came from (its domain only, such as facebook.com), the country Cloudflare reports for the request, and whether it was a phone, tablet or computer. Each of those adds one to a counter. Nothing records who you are.
What it never records: Your IP address, your browser’s identity string, the full address of the page you came from, or the time to the minute. The redirect sets no cookies and reads none. The server keeps no request log.
Who sees the numbers: Anyone can see a link’s total clicks, QR scans and clicks per day, on its page: change /b/ in the link to /d/. Where the clicks came from (sites, countries, devices) is shown only to whoever made the link.
Link previews are not clicks: When you send a link on WhatsApp, Messenger, Telegram, Slack or similar, their servers fetch it to draw a preview. Those fetches are redirected like anyone else, so the preview shows the real destination, but they aren’t counted.
No accounts: manage keys: Making a link gives you a manage key, kept in your browser and listed under My links. It lets you see the breakdown, pause the link and delete it. The server keeps only a fingerprint of it. In the manage link it sits after a #, the part of an address that browsers never send to a server.
When a link can change: A link made on this site always leads where it led when it was made. A link made through the API can be pointed somewhere new by the key that made it, for a page that moved. That is never silent: the link’s page says when its destination last changed, and every earlier destination is kept.
Links don’t expire: A link keeps working until its owner deletes it, or it is switched off for abuse. A deleted link’s address is never given to anyone else, so an old poster or QR code can’t start leading somewhere new.
Links from nor.co.ro: Until October 2026 NOR Bit was at bit.nor.co.ro, and its links read nor.co.ro/b/…. They still work, and keep working: printed and shared, they can’t be changed. The first time you open My links here, this browser fetches the manage keys it kept at the old address, so the links you made there are listed here too.
Harmful links: Links to other shorteners and to local network addresses are refused, and there is a limit on how many links one connection can make in an hour. Every destination is checked with Google Safe Browsing before it is saved, which means Google sees it; addresses it lists as phishing or malware are refused. Any link can be reported from its page; after several reports, visitors see a warning before they continue, until it is checked, and after more it is switched off. The full rules are in the terms of use.
Analytics: The pages on bit.normake.com use Google Analytics to count visits, and it sets Google’s cookies. The short links themselves never load it: following a link is a single redirect with no page in between.
What Cloudflare sees: Cloudflare sits in front of every normake.com site, so it sees what any network in the middle sees: your IP address and which address you opened.