Privacy Policy

Effective date: January 14, 2026

Thank you for using Yourlz (“we”, “us”, “our”). We provide a URL shortening service and related analytics (“Service”). This Privacy Policy describes how we collect, use, disclose, and protect information when you use the Service or interact with our website at yourlz.com (“Site”).

1) Who we are

Data Controller: Yourlz (Yourlz.com). If you have questions or requests, contact: max@yourlz.com.

2) What this policy covers

This policy covers personal information we collect through the Site and Service, including from registered users and visitors who click on shortened links created with Yourlz.

3) Information we collect

  • Account information: email address, username, password (stored as a one-way hash), plan details, subscription status, support preferences.
  • Service content: the short links you create (code/alias), the target URLs, settings (e.g., optional expiry), and plan-based limits.
  • Click analytics (when someone clicks a Yourlz link): timestamp, IP address (stored in binary form), user agent, referrer, and when available, coarse geolocation such as country/city and latitude/longitude derived from IP via a geolocation provider or cache.
  • Billing: payments are processed by our payment provider (e.g., PayPal). We receive limited information (plan, amount, status, masked identifiers); we do not store full payment credentials.
  • Support communications: messages you send through our support form or email, including contact details and any information you provide.
  • Cookies & similar: essential cookies for authentication and session security; optional analytics cookies may be used to understand aggregate usage.
  • Log data: server logs may include IP, pages visited, and error diagnostics.

4) Legal bases for processing (EEA/UK)

  • Contract: to provide and support the Service you request.
  • Legitimate interests: to secure, maintain, and improve the Service; prevent abuse; measure aggregate performance.
  • Consent: where required for optional features or cookies.
  • Legal obligation: to comply with applicable laws and regulatory requirements.

5) How we use information

  • To create and manage your account and provide the Service you select.
  • To shorten and route links and to provide aggregate analytics about link activity.
  • To enforce plan limits and detect or prevent fraud, abuse, malware, and spam.
  • To send essential notices about account, security, or billing. You can opt out of non-essential emails.
  • To comply with law and protect our rights and users.

6) Sharing and disclosure

  • Vendors: we use trusted processors (hosting, email, payments, analytics, geolocation) who process data under our instructions and appropriate safeguards.
  • Legal: we may disclose information if required by law or to protect the safety, rights, or property of users, the public, or Yourlz.
  • Business transfers: if we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction with appropriate notice.
  • We do not sell personal information.

7) International transfers

We may process information in countries other than your own. Where required, we implement safeguards to protect personal information consistent with this policy.

8) Retention

We retain account information while your account is active and as needed to provide the Service. Click analytics and logs are retained for operational and security needs. We may retain certain records to comply with legal obligations, resolve disputes, or enforce agreements. If you delete your account, we will delete associated short links and applicable data unless retention is required by law.

9) Security

We use reasonable technical and organizational measures to protect information (for example, encryption in transit, hashed passwords, access controls). No method is 100% secure. Please use a strong, unique password and keep it confidential.

10) Your rights

Depending on your location, you may have rights to:

  • Access, correct, or delete personal information;
  • Object to or restrict certain processing;
  • Port your data to another service;
  • Withdraw consent (where processing is based on consent).

To exercise rights, contact max@yourlz.com. We will verify and respond as required by law.

11) California privacy (CCPA/CPRA)

If you are a California resident, you may request to know, delete, or correct personal information, and opt out of certain sharing as defined by law. We do not sell personal information. Submit requests to max@yourlz.com.

12) Cookies

We use essential cookies for sign-in, sessions, and CSRF protection. Optional cookies (if used) help us understand aggregate usage. You may control cookies in your browser; disabling essential cookies may prevent the Service from functioning.

13) Children

The Service is not directed to children under 13 (or the age required by your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us to delete it.

14) Third-party links

Shortened links may point to third-party websites. We are not responsible for their content or privacy practices. Review their policies before submitting information.

15) Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Service after changes means you accept the updated policy.

16) Contact

Email: max@yourlz.com