# URL shortener with your own domain in 2026: setup, safety, analytics and SEO

> A URL shortener is a redirect service, and the domain it runs on decides how much people trust your links. This guide covers redirects and SEO, custom-domain setup, safety checks, analytics, QR codes and privacy, with every external fact linked to its primary source.

- Canonical URL: https://www.broadnet.me/blog/url-shortener-custom-domain-guide-2026
- Language: en
- Last updated: 2026-10-22
- Publisher: BroadNet (https://www.broadnet.me)

- Published: 2026-10-22
- Author: BroadNet Editorial Team

A URL shortener swaps a long address for a short one and uses an HTTP redirect to send each visitor on to the real page. Putting those links on a domain you own, such as go.yourbrand.com, lets people see who sent the link before they click it. You also keep the click data, and the links stay under your control. [Shortlen](https://shortlen.com/) is BroadNet's link shortener for individuals and small teams, and its short domain is **b1.lc**. This guide explains each part in plain terms.

> Facts checked at their sources on 22 October 2026. Every standard, policy and product fact here was read at its primary source (IETF, MDN, Google, Let's Encrypt, the European Commission and Shortlen's own pages) and is linked where it appears. We left out anything we could not verify.

| Question | Short answer |
|---|---|
| How does a short link work? | The shortener answers with a 3xx redirect, and the browser follows it to the destination. |
| Which redirect is best for SEO? | Google treats 301/308 as a strong signal that the target is canonical. With 302/307 it keeps the source URL in mind. |
| Why use your own domain? | The domain shows who sent the link, its reputation belongs to you alone, and your links outlive any single vendor. |
| How do you connect one? | Add the DNS record your shortener gives you (usually a CNAME for a subdomain), let it verify, and it issues HTTPS. |
| Are short links safe? | They are when the service checks destinations against threat lists and the link is never used to hide where it goes. |
| Is click data personal data? | In the EU, IP addresses are listed as examples of personal data, so treat click logs carefully. |

## How a URL shortener works: it is a redirect service

When someone opens a short link, the shortener looks up the code after the slash, records the click and replies with an HTTP status code in the 3xx range plus a Location header that holds the real address. The browser then requests that address, and the whole round trip normally passes unnoticed. HTTP semantics are defined in [RFC 9110](https://www.rfc-editor.org/rfc/rfc9110.html#section-15.4), which says a **301 Moved Permanently** means the resource "has been assigned a new permanent URI". A **302 Found** means it "resides temporarily under a different URI", so clients should keep using the original link. 307 and 308 are the same pair, but they guarantee that the request method does not change.

This has a practical effect on short links. RFC 9110 states that a 301 response is "heuristically cacheable", so a browser may remember it and skip the shortener on a later click. That helps speed, but an edited destination or a click count can lag for a returning visitor. [MDN's pages on 301](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Status/301) and [302](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Status/302) explain both codes in plainer language. A good shortener lets you choose the redirect type for each link.

## Redirects and SEO: what Google actually says

Google's [Search Central documentation on redirects](https://developers.google.com/search/docs/crawling-indexing/301-redirects) splits redirects into two groups. For **permanent** redirects (HTTP 301 or 308), Googlebot follows the redirect and the indexing pipeline uses it "as a signal that the redirect target should be canonical". For **temporary** redirects (302, 303 or 307), Googlebot follows it but the pipeline does not treat it as that signal, although the target can still be indexed through other signals. Server-side redirects have the best chance of being read correctly.

In practice, a short link on a proper server-side redirect does not hurt the page it points to, because search engines follow it to the destination. Use a 301 when a short link will always point to the same page. Use a 302 or 307 when you expect to change the destination, such as a seasonal campaign or a printed QR code. The real SEO risk is losing control: if a shared shortener shuts down or blocks your link, every place you published it leads to an error. A domain you own can be moved to another service with the links intact.

One firm rule applies here: never use a redirect to mislead. Google's [spam policies](https://developers.google.com/search/docs/essentials/spam-policies) define **sneaky redirects** as sending visitors somewhere "maliciously", either to show users and search engines different content or to show users "unexpected content that doesn't fulfill their original needs". The same policy says there are many legitimate reasons to redirect. A short link is fine. A short link built to disguise a destination is not.

## Why a branded custom domain beats a shared one

On a generic shared domain, your links sit next to links from millions of strangers. The domain says nothing about who sent the link, and it shares its reputation with everyone else on it. If enough bad actors use that domain, filters may grow wary of all its links, yours included. A branded domain such as go.yourbrand.com shows the sender in the link itself and builds a reputation that belongs only to you.

This guide is about links on the web, in email and on social media. If your links go out by text message, two of our earlier guides go deeper: [branded short links and SMS attribution](https://www.broadnet.me/blog/branded-short-links-sms-attribution-2026) and [how link shortening affects SMS deliverability](https://www.broadnet.me/blog/branded-links-sms-shortening-deliverability).

## Setting up your own short domain: DNS, verification and HTTPS

1. **Pick a name.** Most teams use an unused short subdomain such as go. or link., so the links never clash with the website.
2. **Add the DNS record.** For a subdomain this is usually a CNAME record. [RFC 1034](https://www.rfc-editor.org/rfc/rfc1034.html) defines a CNAME as the record that "identifies the canonical name of an alias", so your subdomain becomes an alias for the shortener's service. Copy the exact record from the setup screen.
3. **Verify ownership.** The service checks that the name points at it, so nobody can claim a domain they do not control.
4. **Get HTTPS.** Short links must load over HTTPS. Most modern services issue the certificate automatically using ACME, the protocol standardised in [RFC 8555](https://www.rfc-editor.org/rfc/rfc8555.html). [Let's Encrypt](https://letsencrypt.org/how-it-works/) describes the aim as letting a server "automatically obtain browser-trusted certificates without any human intervention", after first proving it controls the domain.
5. **Set it as your default.** New links use your domain; older links keep working.

## Safety: threat lists, abuse and never hiding a destination

The weakness of a short link is that it hides where it goes. That is why a responsible shortener checks every destination, both when the link is created and later on. Google's [Safe Browsing APIs](https://developers.google.com/safe-browsing/v4) let applications check URLs against "Google's constantly updated lists of unsafe web resources", such as phishing sites and pages hosting malware or unwanted software. Google says the [Safe Browsing API](https://developers.google.com/safe-browsing) is for non-commercial use only and points commercial services to [Web Risk](https://cloud.google.com/web-risk/docs/overview), its enterprise product built on the same idea.

- **Check on create and on edit.** Changing a destination must trigger a new scan.
- **Re-scan active links.** Safe pages can be compromised later.
- **Use links nobody can guess for private material.** Short codes are short, so invoices and personal documents need longer, random codes.
- **Never shorten to hide.** Shortening a link to get it past a filter or to disguise a destination is the behaviour that gets shared domains flagged in the first place.

For how attackers use disguised links in text messages, and how to defend against it, see our guide to [smishing defence](https://www.broadnet.me/blog/smishing-defense-sms-phishing-protection).

## Analytics, UTM parameters and privacy

Every click passes through the shortener, so it can count clicks by country, device, browser, operating system, referrer and time. Raw totals mislead, because link-preview generators, security scanners and crawlers all "click". A useful report separates them from people.

Short-link analytics tell you who clicked. Your web analytics tell you what those visitors did next. UTM parameters connect the two. Google Analytics' help page on [collecting campaign data with custom URLs](https://support.google.com/analytics/answer/10917952?hl=en) lists the core tags, **utm_source** (for example newsletter4), **utm_medium** (for example email) and **utm_campaign** (for example spring_sale), and warns that values are case-sensitive: "SpringSale and Spring_Sale are considered distinct". So use lowercase consistently. Build the tagged URL first, using our free [UTM link builder](https://www.broadnet.me/tools/utm-link-builder) if you like, and then shorten it.

Click logs also contain IP addresses, and in the EU that matters. The European Commission's [guide to data protection](https://commission.europa.eu/law/law-topic/data-protection/data-protection-explained_en) lists "an Internet Protocol (IP) address" among its examples of personal data under the GDPR, and "storing IP addresses" as an example of processing. Ask any shortener where location is worked out, how long full IP addresses are kept, and whether click data is sold or used for ad profiles.

## QR codes and link controls

A **static** QR code stores the final address in its pattern, so it can never change and it records no scans. A **dynamic** QR code stores a short link, so you can change the destination after printing and every scan is counted as a click. For anything printed, where reprinting is expensive, use a dynamic code.

- **Editable destination**: fix a typo or move a campaign without reissuing the link.
- **Expiry date or click limit**: end a promotion on a set date or after a set number of clicks.
- **Password**: limits who is forwarded through the short link. It does not protect the destination page itself.
- **Smart routing**: send one link to different pages by device, operating system, country or time.
- **Redirect type**: choose 301, 302 or 307 for each link, depending on whether it will ever change.

## Pricing tiers: a buyer's checklist

- **New links per month**: whether the cap applies to links you create or to clicks they receive.
- **Custom domains**: how many are included and whether HTTPS is automatic.
- **Dynamic QR codes**: how many, and whether scans are tracked the same way as clicks.
- **Link controls**: which plan unlocks passwords, expiry, smart links and A/B tests.
- **Team seats and audit log**: needed as soon as more than one person manages the links.
- **API access**: basic or full, and the rate limit on each plan.
- **What happens on downgrade**: existing links should keep redirecting.

## How Shortlen fits

Shortlen is the website for BN Shortener, BroadNet's link management, QR code and analytics platform. You create an account and manage links at b1.lc. Here is what its pages state, checked on 22 October 2026:

- **Your own domain on every plan.** You point a domain such as go.yourbrand.com at the service, verify it with one DNS record, and HTTPS is issued for you.
- **Analytics that count people.** Clicks are tracked by location, device, browser and time, and known bots and link-preview scanners are kept separate.
- **Destinations checked.** Every destination is scanned against threat sources when a link is created or changed, active links are re-scanned daily, and anyone can report a link ([security & trust](https://shortlen.com/security/)).
- **Privacy.** Location is worked out on Shortlen's own servers, visitor IP addresses are shortened after 90 days, and click data is not sold or used to build advertising profiles.
- **Controls.** Dynamic QR codes, smart links, passwords, expiry dates, click limits, editable destinations, a choice of 301/302/307 redirects and a REST API.

| Plan | Price | New links / month | Dynamic QR codes | Custom domains | Notable extras |
|---|---|---|---|---|---|
| Free | $0 | 100 | 5 | 1 | Click analytics, basic API |
| Pro | $15/month | 1,000 | 250 | 3 | Smart links, A/B tests, password and expiring links |
| Business | $49/month | 10,000 | 2,500 | 10 | 5 team seats, audit log, priority email support |

Prices are in US dollars before tax, yearly billing lowers the monthly rate, and there is a custom Enterprise tier with single sign-on. See the full limits on [Shortlen's pricing page](https://shortlen.com/pricing/). If you send links inside SMS campaigns through BroadNet, our [link shortener for messaging](https://www.broadnet.me/products/link-shortener) adds per-recipient tracking. You can find Shortlen alongside BroadNet's other products on our [brands page](https://www.broadnet.me/brands).

## Frequently asked questions

### Does a shortened link hurt SEO?

No, not when the link uses a server-side redirect. Google's documentation says Googlebot follows redirects, and for a permanent redirect (301 or 308) it treats the target as the canonical page. Use a 301 for links that never change, and keep short links on a domain you control so they never break.

### Are URL shorteners safe?

The technology is safe. The risk is that a short link hides its destination. Use a service that checks destinations against threat lists when links are created or edited, re-scans them over time and makes reporting easy. A branded domain helps people judge a link before they click. Never shorten a link to disguise where it goes, because Google treats that kind of redirect as spam.

### What is the difference between a 301 and a 302 short link?

A 301 tells browsers and search engines the move is permanent. Browsers may cache it, and Google treats the destination as canonical. A 302 says the move is temporary, so clients keep using the short link. Use 301 for links that will never change, and 302 or 307 for campaigns, QR codes and anything you might edit later.

### How do I connect my own domain to a URL shortener?

Choose a short subdomain such as go.yourbrand.com and add the DNS record your shortener shows you, usually a CNAME. Then wait for verification and let the service issue an HTTPS certificate. DNS changes usually take effect within minutes to a few hours. Once the domain is live, set it as your default for new links.

### Should I add UTM parameters before or after shortening?

Add them before. Build the full destination URL with utm_source, utm_medium and utm_campaign, then shorten that tagged URL. The short link stays tidy while your web analytics still receive the campaign tags. Use lowercase throughout, because Google Analytics treats values with different capitals as separate entries in its reports.

### What is the difference between a static and a dynamic QR code?

A static QR code has the destination built into its pattern, so it cannot be edited and records no scans. A dynamic QR code holds a short link, so you can change where it points after printing and count every scan. Use dynamic codes for anything printed, and static codes only for one-off uses where nothing will change.

### Is short-link click data personal data under the GDPR?

It can be. The European Commission lists IP addresses among its examples of personal data, and storing them counts as processing. Choose a shortener that is clear about how long it keeps full IP addresses, where location is calculated and whether data is sold. Then describe your own link tracking in your privacy notice.

### How much does a URL shortener with a custom domain cost?

It depends on volume and features. On Shortlen, the Free plan ($0) includes one custom domain and 100 new links a month. Pro ($15 a month) adds three domains, 1,000 links and smart links. Business ($49 a month) adds ten domains, 10,000 links and five team seats. When comparing services, check link caps, QR limits, controls and what happens when you downgrade.

Ready to put your links on a domain your audience already trusts? [Start free on Shortlen](https://shortlen.com/) and connect your domain, make a dynamic QR code and see who really clicked. No card is needed, and you can move up to a paid plan when you need more.