Sovereignty Architecture

• Residency: application servers, managed PostgreSQL, database backups and routing proxies operate strictly inside the European Economic Area.
• Dynamic resolution: short links and profile hubs (rout.id / rout.be) necessarily traverse network nodes. Standard transport-layer metadata (IP, User-Agent) is processed in memory for real-time routing and immediate DDoS mitigation only.
• No long-term retention: full IP addresses are not written to durable storage. Scan analytics are coarse and anonymous — timestamp, country, device family — and are destroyed with the link.
• No profiling: no advertising cookies, no cross-site identifiers, no browser fingerprinting.

• WebAuthn passkeys: biometric or hardware-key sign-in where the private key never leaves your device, and no shared secret exists to breach.
• Custom OIDC: bring your own identity provider — Keycloak, Authentik or Authelia — so account authority stays with you rather than a platform.
• Payment decoupling: regulated fiat rails (SEPA, PayPal, Venmo) are handled by PCI-DSS compliant processors and stay separated from your sovereign identity records.

ROUT is licensed under the GNU Affero General Public License v3.0. Every claim on this page is checkable against the source: the client-side generator, the redirect handler and the analytics pipeline are all public. The AGPL's network clause means any hosted fork must publish its modifications, so the guarantees travel with the code. Self-hosting is a first-class path, not an afterthought.