Privacy Policy

Account Information: When you register, we collect your name, email address, password, and optional profile information.

URL Data: We collect the original URLs you shorten, custom aliases you create, and metadata about your links.

Analytics Data: We collect information about link clicks, including IP addresses, geographic location, device type, browser type, operating system, and referrer information.

Usage Data: We collect information about how you interact with our Service, including pages visited, features used, and time spent on the platform.

Payment Information: For paid subscriptions, we collect billing information through our payment processor (Stripe). We do not store credit card numbers.

We use your information to:

• Provide, maintain, and improve our Service
• Process your transactions and manage subscriptions
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Analyze usage patterns and improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations
• Send marketing communications (with your consent)

We use the following analytics and tracking tools:

Google Analytics: To understand how users interact with our website and Service.

Cookies: We use cookies to maintain your session, remember your preferences, and track usage patterns. You can control cookies through your browser settings.

Log Files: We automatically collect certain information in log files, including IP address, browser type, ISP, referring/exit pages, and timestamps.

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: We share information with third-party vendors who perform services on our behalf (hosting, analytics, payment processing, customer support).

Legal Requirements: We may disclose information if required by law or in response to valid legal process.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

With Your Consent: We may share information for any other purpose with your explicit consent.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Employee training on data security practices

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we retain data for 90 days to allow for recovery, then permanently delete it. We may retain certain information for longer periods to comply with legal obligations, resolve disputes, or enforce our agreements.

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information.

Portability: Request a copy of your data in a machine-readable format.

Opt-Out: Opt out of marketing communications or certain data processing activities.

To exercise these rights, contact us at privacy@urlforge.app.

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to object to processing of your personal data
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

Our legal basis for processing your data includes consent, contract performance, legal obligations, and legitimate interests.

If you are a California resident, you have the following rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information.

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including standard contractual clauses approved by the European Commission.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide additional notice (such as an email notification).

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@urlforge.app
Address: URL Forge, Seattle, WA
Phone: (505) 555-0125

Data Protection Officer: dpo@urlforge.app