Privacy Policy

When you use URLGenZ, we may collect the following information: • Account information: When you register, we collect your name, email address, and a hashed version of your password. • URLs: Long URLs you submit for shortening, stored to enable redirect functionality. • Click data: When a shortened link is clicked, we record the timestamp, IP address (anonymized), user agent, and referrer URL. • IP addresses: Used temporarily for rate limiting (guest users) and click tracking. Not sold or shared with third parties. • Cookies: A session cookie is set when you sign in. We use cookies only for authentication purposes.

We use the collected information to: • Provide and improve the URLGenZ URL shortening service. • Display click analytics in your dashboard. • Enforce rate limits to prevent abuse. • Protect the service from malicious use. • Send transactional emails (e.g., password reset) if applicable. We do not sell, trade, or otherwise transfer your personal information to outside parties.

• Account data is retained as long as your account is active. • Click data associated with your links is retained as long as the link exists. • Guest link data (IP-based rate limits) is reset daily. • You may delete your account and all associated data at any time by contacting us.

URLGenZ uses minimal cookies: • Session cookie: Set upon login to maintain your authenticated session. This cookie is HttpOnly and Secure. • No tracking cookies, advertising cookies, or third-party analytics cookies are set by default. If Google AdSense is enabled on this site, Google may set its own cookies for advertising purposes. See Google's Privacy Policy for details.

We may use the following third-party services: • Neon.tech (PostgreSQL hosting): Stores your account and link data. • Vercel: Hosts and serves the URLGenZ application. • Google AdSense: May display advertisements. Google's privacy policy applies to ad-related data collection. Each third party has its own privacy policy and data handling practices.

We implement industry-standard security measures: • Passwords are hashed using bcrypt (cost factor 12) — we never store plaintext passwords. • Sessions are secured using JWT with a secret key. • All connections are encrypted via HTTPS/TLS. • Content Security Policy (CSP) headers are set to prevent XSS attacks. • User input is validated server-side using Zod schemas.

Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your account and data. • Object to or restrict processing of your data. To exercise these rights, contact us at peakbrosmao5@gmail.com.

URLGenZ is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a notice on the site. Continued use of URLGenZ after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us at: Email: peakbrosmao5@gmail.com Website: https://URLGenZ.site/contact