Speed, security, and zero fluff
Shortyy is engineered for infrastructure reliability. Sub-15ms redirects, permanent code retirement, and developer ergonomics that make sense.
Sub-15ms Redirect Engine
Redirects run through Fastify and Upstash Redis memory without hitting the database. Missing links get cached negatively for 60 seconds so bots cannot overwhelm the system.
Official TypeScript SDK (@g/shortyy)
Zero runtime dependencies. Built on modern web standards with native fetch and structured errors. Lightweight, fully typed, and ready for Node, Deno, Bun, or edge runtimes.
Cryptographic API Keys
High-entropy keys with a standard sh_live_ prefix. Hashed with SHA-256 before storage, shown strictly once upon creation, and verified against Redis in under a millisecond.
Deterministic Expiration
No zombie links cluttering storage. Free links expire within 24 hours (or 3 hours via the SDK). Paid plans unlock durations up to 100 years.
Token-Bucket Rate Limiting
Smooth, continuous token refills rather than harsh monthly lockouts. Rotating API keys shares your user bucket so traffic pacing stays fair and consistent.
Permanent Code Retirement
Short codes are never recycled. When a link expires or gets deleted, its code is permanently locked so nobody can ever hijack your past links for phishing.
Automated Cold Storage Archival
Expired links are safely packaged, gzipped, checksum-verified, and preserved in cold object storage without slowing down active redirect tables.
Visitor IP Routing
Set allowed or blocked IP addresses on individual links. Enforced directly at the redirect edge so unwanted traffic never touches your target destination.