Privacy Policy

1. Privacy Overview

ShortenFor.Me ("we," "our," or "us") operates a URL shortening service that respects your privacy. This Privacy Policy explains:

• What personal information we collect and why
• How we use and protect your information
• Your choices regarding your personal data
• How to contact us about privacy concerns

By using our service, you consent to the data practices described in this policy.

2. Information We Collect

We collect several types of information to provide and improve our services:

2.1 Information You Provide

2.2 Information We Collect Automatically

• Usage Analytics: Click data, timestamps, referring websites
• Device Information: IP address, browser type, operating system
• Location Data: Country and city based on IP address (for analytics)
• Cookies: Small data files to remember your preferences
• Log Data: Server logs including access times and pages visited

2.3 Information from Third Parties

• Payment Processors: Transaction data from Stripe for billing
• GeoIP Services: Location data for analytics (when available)
• Social Media: Profile information if you connect social accounts

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Create and manage your shortened URLs
• Provide click analytics and statistics
• Generate QR codes for your links
• Manage your account and preferences
• Process Premium subscription payments

3.2 Communication

• Send account verification and password reset emails
• Provide customer support and respond to inquiries
• Send important service announcements
• Notify you of subscription renewals (Premium users)

3.3 Service Improvement

• Analyze usage patterns to improve our service
• Develop new features and functionality
• Monitor and prevent fraudulent activity
• Ensure technical functionality and security

3.4 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Protect our rights and prevent abuse
• Enforce our Terms of Service

4. Information Sharing

We do not sell, rent, or trade your personal information. We may share information in limited circumstances:

4.1 Service Providers

4.2 Legal Requirements

We may disclose information when required by law, such as:

• Response to valid legal process (subpoenas, court orders)
• Protection of rights, property, or safety
• Investigation of fraud or security issues
• Compliance with applicable regulations

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will provide notice before your information is transferred.

5. Data Security

5.1 Technical Safeguards

• Encryption: All data transmitted using SSL/TLS encryption
• Password Security: Passwords hashed using Argon2ID algorithm
• Database Security: Encrypted database storage with access controls
• Secure Hosting: Infrastructure hosted with reputable cloud providers
• Regular Updates: Software and security patches applied promptly

5.2 Administrative Safeguards

• Access Controls: Limited employee access on need-to-know basis
• Background Checks: Security screening for personnel with data access
• Training: Regular security awareness training for staff
• Incident Response: Procedures for handling security incidents

5.3 Physical Safeguards

• Data Centers: Secure, monitored facilities with restricted access
• Equipment Security: Secure disposal of hardware containing data
• Environmental Controls: Protection against physical threats

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

6.1 Types of Cookies

6.2 Managing Cookies

You can control cookies through your browser settings:

• Block all cookies (may affect website functionality)
• Delete existing cookies from your device
• Set preferences for specific websites
• Receive notifications when cookies are set

6.3 Do Not Track

We respect Do Not Track signals when technically feasible. However, some features may not function properly with tracking disabled.

7. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

7.2 Data Deletion

We automatically delete data according to our retention schedule. You can also request deletion of your data as outlined in the "Your Privacy Rights" section.

8. Your Privacy Rights

You have several rights regarding your personal information:

8.1 Access and Portability

• Access: Request a copy of personal information we hold about you
• Portability: Receive your data in a structured, machine-readable format
• Dashboard: View and manage your account information through our dashboard

8.2 Correction and Updates

• Correction: Update inaccurate or incomplete personal information
• Account Settings: Modify your preferences and account details
• Profile Management: Change your name, email, and other profile information

8.3 Deletion and Restriction

• Deletion: Request deletion of your personal information
• Account Closure: Delete your entire account and associated data
• Selective Deletion: Remove specific URLs or data points
• Processing Restriction: Limit how we process your information

8.4 Objection and Consent Withdrawal

• Objection: Object to certain types of data processing
• Consent Withdrawal: Withdraw consent for optional data processing
• Marketing Communications: Unsubscribe from promotional emails

9. Third-Party Services

Our service integrates with third-party providers who have their own privacy policies:

9.1 Payment Processing

Stripe: We use Stripe for secure payment processing. Stripe has its own privacy policy governing the collection and use of payment information. View Stripe's Privacy Policy

9.2 Email Services

We may use third-party email services to send transactional emails. These services are bound by data processing agreements and cannot use your email for other purposes.

9.3 Cloud Infrastructure

Our service is hosted on cloud infrastructure providers who maintain physical security of data centers and comply with industry standards.

9.4 Your Responsibility

When you create shortened URLs linking to third-party websites, those sites have their own privacy practices. We are not responsible for the privacy practices of linked websites.

10. International Data Transfers

Our service may involve transferring your information internationally:

10.1 Cross-Border Transfers

• Your information may be processed in countries other than your residence
• We ensure adequate protection through contractual safeguards
• Transfers comply with applicable data protection laws
• We use standard contractual clauses for international transfers

10.2 Safeguards

• Adequacy Decisions: Transfers to countries with adequate protection
• Standard Contractual Clauses: EU-approved contract terms
• Binding Corporate Rules: Internal privacy standards
• Certification Programs: Privacy framework compliance

11. Children's Privacy

11.1 Age Verification

• Users must be at least 13 years old to create an account
• We do not have actual knowledge of collecting data from children under 13
• If we learn we have collected information from a child under 13, we will delete it

11.2 Parental Rights

• Parents can request information about data we may have collected from their child
• Parents can request deletion of their child's information
• Contact us immediately if you believe your child has provided personal information

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons:

12.1 Notification of Changes

• Website Notice: Updated policy posted on this page
• Email Notification: Notice sent to registered users for material changes
• Dashboard Alert: Prominent notices in user dashboards
• Date Updates: "Last Updated" date modified at the top of this policy

12.2 Continued Use

Your continued use of our service after policy changes constitutes acceptance of the updated policy. If you disagree with changes, you may close your account.

12.3 Material Changes

For significant changes affecting your rights, we will provide at least 30 days advance notice and may require explicit consent for certain changes.

13. Contact Information