Privacy Policy

This policy explains what Urlix ("we") collects when you use our link shortening and management service at www.urlix.be, and why. It covers both account holders and visitors who click a short link created on the Service.

1. Information you provide

• Account details: name, email address, and password (stored as a salted hash, never in plain text).
• Content you create: destination URLs, custom aliases, link passwords (hashed), and custom domains.
• Billing details, handled directly by our payment processor (Stripe) — we never see or store your full card number.
• Anything you send us directly, such as support requests or abuse reports.

2. Information collected automatically

When someone clicks a short link, we record click analytics so link owners can see how their links perform: timestamp, referrer, device/browser/OS (parsed from the user-agent string), and an approximate country. We deliberately limit what we keep from the visitor's IP address:

• We never store the raw IP address. It is combined with a server-side secret salt and one-way hashed before being written to the database, so it cannot be reversed back into an IP.
• Location is resolved to country-level granularity only — we don't store precise geolocation.
• The hashed IP is used only for abuse detection (e.g. rate limiting and duplicate-click detection), never to build an advertising profile or to identify or track an individual visitor across other sites.

3. Cookies

We use a minimal set of cookies required for the Service to function: a signed session cookie to keep you logged in, and nothing beyond that for marketing or third-party advertising purposes.

4. How we use this data

• To operate the Service — creating, redirecting, and reporting on your links.
• To protect the Service and its users — detecting abuse, fraud, and rate-limit violations.
• To process payments and manage subscriptions through Stripe.
• To send essential account email (verification, password resets, billing receipts) via our email provider, Resend.
• To respond to support requests and abuse reports.

We do not sell your personal data or a visitor's click data to third parties.

5. Who we share data with

We share data only with the service providers needed to run Urlix: our database and hosting infrastructure, Stripe for payment processing, and Resend for transactional email. Each only receives what it needs to perform its function, and we may disclose information if required by law or to investigate a credible abuse report.

6. Data retention

We keep account and link data for as long as your account is active. Click analytics are retained to power your dashboard's historical charts. If you delete your account, we delete or anonymize your personal account data within a reasonable period, except where we're required to retain records (e.g. billing records) for legal or accounting purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. You can update most account details yourself from your settings, or contact us at info@urlix.be to make a request.

8. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above.

9. Contact

Questions about this policy or your data? Reach us at info@urlix.be.