On a click, Qelno stores only what the statistics need – without IP address and without cookie. With Key and House everything runs on your server.
On a click
What the instance stores.
The origin is stored without parameters and anchors. Countries are derived from a local database (DB-IP Lite), without requests to third-party services; only the country code is stored. Device, browser and operating system are sorted into coarse classes on the request; the user agent itself is not stored. The redirect sets no cookie.
Principles
How Qelno is built.
Your server, your location
Key and House run on your server. You choose the provider and the location, for example a data centre in Germany. The numbers stay with you.
Signed updates
Updates come from the influ.cloud update channel. The instance checks the checksum (SHA-256) and the signature (RSA) before it installs a package.
Sign-in
Users own their links. Sign-in can be protected with a second factor (TOTP).
Lean code
Plain PHP without framework or third-party libraries, PDO and MySQL. The panel loads no fonts from third-party servers.
One source for packages
Packages are available exclusively from release.influ.cloud/qelno/download/. The download is protected by a password that is valid for 30 minutes.
Hosted with a contract
For Atelier, influ.cloud operates the instance. For this we conclude a data processing agreement under Art. 28 GDPR.
Protection
What adds protection.
Password and expiry
Links can be protected with a password, given an expiry date or limited to a number of clicks.
Filtered content
HTML from the home page editor passes an allow list: no scripts, no forms, no javascript: links. Videos only from YouTube without cookies and Vimeo.
Security headers
The instance sends CSP, nosniff, Referrer-Policy and X-Frame-Options; HSTS is on by default. Error pages show no technical details.
To be clear
What the instance reports to influ.cloud.
For licence and updates to work, the instance talks to the publisher’s server:
Licence status: only the instance identifier
Daily status report: host, counter totals, the most used codes and the contact address of the instance
Check for new updates
Click data of individual visitors does not go to influ.cloud. An option to switch off the status report is in progress.
This website
No cookies, no tracking.
qelno.link and qelno.cloud set no cookies, do not count visits and load fonts and images only from their own server. They are built to WCAG 2.2 level AA.
