Privacy Policy

1. Introduction

urlfy.cc ("we", "our" or "Service") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information in accordance with the Brazilian General Data Protection Law (LGPD) and international regulations such as GDPR.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Password (stored with bcrypt encryption)
• OAuth profile information (if using social login)

2.2 Analytics Data

To provide statistics about your links, we collect:

• IP address (anonymized through immediate SHA-256 hash)
• Country and city (through offline geolocation)
• Browser, operating system and device type
• Referral URL (click source)
• Access timestamp

Important: We never store your IP address in plain text. It is converted to an irreversible hash immediately after collection.

2.3 Cookies

We use cookies to:

• Keep your session active (essential cookies)
• Protect against CSRF (security cookies)
• Privacy.sections.s2.sub3Items.i3

3. How We Use Your Data

We use your data to:

• Provide and maintain the Service
• Generate statistics and analytics about your links
• Authenticate and manage your account
• Send important notifications about the Service
• Detect and prevent fraud and abuse
• Comply with legal obligations

Research Context: Collected data is also used to demonstrate technical competencies in implementing analytics systems with privacy (IP hashing, anonymization, LGPD compliance).

4. Legal Basis (LGPD)

We process your data based on:

• Consent: When you create an account or accept cookies
• Contract execution: To provide the requested Service
• Legitimate interest: For security, fraud prevention and Service improvements
• Legal obligation: When required by law

5. Data Sharing

We do not sell your personal data. We may share data only with:

• Service providers: Companies that help us operate the Service (hosting, email)
• Legal authorities: When required by law or to protect legal rights

6. Data Retention

We keep your data for the following periods:

• Account data: As long as your account is active
• Raw analytics: 90 days (then only aggregated data)
• Backups: Up to 30 days after deletion

7. Your Rights (LGPD/GDPR)

You have the right to:

• Access: Request a copy of all your data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request the removal of your data
• Portability: Receive your data in a structured format
• Consent revocation: Withdraw consent at any time
• Opposition: Object to the processing of your data

To exercise these rights, access your account settings or contact us through our contact page. We will respond within 72 hours as required by the LGPD.

8. Security

We implement technical and organizational measures to protect your data:

• TLS/SSL encryption on all connections
• Passwords stored with bcrypt (secure hashing)
• Immediate anonymization of IP addresses
• Encrypted backups
• Strict access controls
• Continuous security monitoring

9. International Transfers

Your data is stored on servers located in Brazil. If international data transfer is necessary, we ensure adequate protection as required by the LGPD.

10. Minors

The Service is not directed at minors under 18. We do not intentionally collect data from minors. If we become aware of such data, we will delete it immediately.

11. Changes to this Policy

We may update this Policy periodically. We will notify you of significant changes through the Service or by email. We recommend reviewing this Policy regularly.

12. Contact and DPO

For privacy questions or to exercise your rights, contact us through our contact page.

13. Supervisory Authority

If you are not satisfied with our response, you have the right to file a complaint with the National Data Protection Authority (ANPD) in Brazil.