Privacy Policy

Effective Date: January 1, 2025
Last Updated: 2025

1. Introduction

U.RW ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening service at u.rw (the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• URLs: Original URLs you submit for shortening and custom short codes you create
• Payment Information: Processed securely through third-party payment processors (we do not store credit card details)
• Communications: Any messages or feedback you send to us

2.2 Information Automatically Collected

• Analytics Data: Click counts, referrer information, browser type, device type
• IP Addresses: For security, fraud prevention, and geographic analytics
• Cookies: Session cookies for authentication and preference cookies for theme selection
• Log Data: Server logs including access times, pages viewed, and technical errors

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our URL shortening service
• Create and manage your account
• Generate analytics and statistics for your shortened URLs
• Process payments for premium subscriptions
• Send service-related emails (account verification, password resets)
• Improve our service and develop new features
• Prevent fraud, spam, and abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

• Service Providers: With trusted third parties who assist us (hosting, analytics, payment processing)
• Legal Requirements: When required by law or to respond to legal process
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Consent: When you explicitly agree to sharing

5. Third-Party Services

Our service integrates with:

• Cloudflare: For CDN, DDoS protection, and performance optimization
• Umami Analytics: Privacy-focused analytics (no personal data collected)
• QR Code API: For generating QR codes of shortened URLs

6. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmissions
• Bcrypt hashing for password storage
• Regular security audits and updates
• Secure server infrastructure with firewall protection
• Limited access to personal data on a need-to-know basis

7. Data Retention

• Account Data: Retained while your account is active
• URL Data: Retained indefinitely unless you delete them
• Analytics Data: Aggregated and anonymized after 90 days
• Server Logs: Retained for 30 days

8. Your Rights and Choices

8.1 General Rights

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Portability: Export your URLs and analytics data
• Opt-out: Unsubscribe from marketing communications

8.2 GDPR Rights (EU Users)

If you are in the European Economic Area, you have additional rights under GDPR including:

• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with supervisory authorities

8.3 CCPA Rights (California Users)

California residents have additional rights under CCPA including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination

9. Cookies Policy

We use the following types of cookies:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings (theme, language)
• Analytics Cookies: Help us understand service usage (anonymized)

You can control cookies through your browser settings, though this may limit functionality.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover such information, we will promptly delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our service. Continued use after changes constitutes acceptance.

13. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

• Email: [email protected]
• Website: https://u.rw/contact
• Data Protection Officer: [email protected]