1. No account needed
You can use the bypass tool without signing up or giving your name or email address.
2. Server logs
Like most websites, Lewati keeps standard server logs. When you bypass a link, the server may store:
- the short URL you submitted and the destination it resolved to,
- your IP address and browser user agent,
- the method used to resolve the link, and how long it took.
This data is used for rate limiting, abuse prevention, fixing errors and checking that the tool works. Logs are kept for a limited period and then removed. Lewati is not a public archive of the links people check.
3. Rate limiting
To keep the tool free and stop automated abuse, Lewati limits how many requests each IP address can make. That means your IP address is processed for a short time. When the site runs behind a trusted proxy or CDN such as Cloudflare, the original IP address is read from the standard forwarding headers.
4. Third-party services
The result page can ask Microlink (api.microlink.io) for a preview screenshot of the destination. When it does, your browser sends the resolved URL to Microlink.
The result page also links to independent safety checkers: Google Safe Browsing, VirusTotal, Sucuri, Norton Safe Web, McAfee SiteAdvisor and WOT. Nothing is sent to them unless you open one of those links, and each has its own privacy policy.
5. Cookies
The main bypass tool does not use account or tracking cookies.
6. External destinations
Short links point to websites that Lewati does not run. Once you open a destination, its own privacy practices apply, not this policy. The terms of service cover the rest of the rules of use.