Privacy Policy

Last updated: January 2026

Your privacy matters. We handle your data with care and transparency.

1. Introduction

At ug.uy, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening service. Please read this policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when using our services:

  • Account Information: Email address, name (optional)
  • Payment Information: Processed securely by Stripe (we do not store full card details)
  • Contact Form Data: Name, email, message content
  • Profile Information: Avatar, bio (for Link-in-Bio pages)

2.2 Usage Information

We automatically collect certain information when you use our services:

  • Link Data: Original URLs, custom slugs, click analytics
  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, features used, timestamps
  • QR Code Data: Generated QR codes and their usage statistics

2.3 Analytics Data

For shortened links, we collect anonymized click analytics including:

  • Geographic location (country/region level only)
  • Referrer information
  • Device and browser type
  • Click timestamps

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and maintain our URL shortening service
  • Process payments and manage subscriptions
  • Send billing notifications and important service updates
  • Display link analytics to link owners
  • Prevent fraud and abuse
  • Improve our services and user experience
  • Comply with legal obligations

4. Payment Data Handling

PCI DSS Compliance

We use Stripe for all payment processing. Stripe is a certified PCI Service Provider Level 1, the most stringent level of certification available in the payments industry. We never store your full credit card details on our servers.

When you make a payment:

  • Your payment is processed directly by Stripe
  • We only receive a confirmation of successful payment
  • We store your Stripe customer ID and subscription status
  • Last 4 digits of card and expiry date may be stored for your reference

5. Data Security

Encryption

All data is encrypted in transit (TLS 1.2+) and at rest.

Secure Infrastructure

Hosted on Firebase with enterprise-grade security.

Access Control

Strict access controls and authentication required.

Data Retention

Data deleted when no longer needed or upon request.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

6. Your Rights (GDPR Compliance)

If you are in the European Economic Area (EEA), you have the following rights under GDPR:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("Right to be Forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Rights Related to Automated Decision-Making: Including profiling

To exercise these rights, contact us at hello@ug.uy. We will respond within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences
  • Analyze site traffic and usage patterns
  • Prevent fraud and abuse

By using our site, you consent to our use of cookies. You can manage cookie preferences through your browser settings.

8. Third-Party Services

We use the following third-party services that may collect information:

  • Stripe: Payment processing (subject to Stripe's Privacy Policy)
  • Firebase (Google): Hosting, database, authentication (subject to Google's Privacy Policy)
  • Resend: Email delivery (subject to Resend's Privacy Policy)

We only share information necessary for these services to perform their functions.

9. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

Anonymous link click analytics are retained indefinitely for statistical purposes. Personal account data is deleted upon account closure, except where we must retain it for legal purposes.

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your data when transferred internationally, including standard contractual clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as email notification).

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Data Protection Officer

For GDPR-related inquiries or to exercise your data protection rights, contact our Data Protection Officer at: dpo@ug.uy

By using ug.uy, you acknowledge that you have read and understood this Privacy Policy.