urlr

Privacy notice

Draft — not yet reviewed by a solicitor

This page describes what URLR actually does, but it has not had legal review and must not be relied on as a published notice. Remove this banner only once it has.

This describes what URLR collects, why, and how long it is kept. URLR is the data controller. The regime is the UK GDPR and the Data Protection Act 2018, and the regulator is the Information Commissioner's Office.

What we collect

  • Your email address — it is how you sign in. Kept until you delete your account.
  • Your username and anything you choose to add to your profile — shown publicly.
  • What you share, vote on and write — shared links and comments are public. Private notes are never shown to anyone else.
  • Your IP address, recorded when you submit or comment, to investigate abuse. Reduced to its network portion after 30 days and deleted after 90.
  • Sign-in codes — stored only as an irreversible hash, and deleted within a day.

Why we are allowed to

Your account, your submissions and your comments are processed to provide the service you asked for. IP addresses and rate-limiting data are processed on the basis of legitimate interests, specifically keeping the site free of spam and abuse. Optional profile fields are processed with your consent, and you can remove them at any time.

Who else sees it

Your email address is sent to Resend, in the United States, so that sign-in codes can be delivered. Nothing else about you is shared with anyone, and we do not sell data or use it for advertising.

Cookies and local storage

URLR stores a sign-in token and your light or dark preference in your browser. Both are strictly necessary for the site to work, so no consent banner is shown. We do not run advertising or tracking cookies.

Your rights

  • Get a copy of everything held about you, from your account settings.
  • Correct anything wrong, by editing your profile.
  • Delete your account. Your email address, profile, saved links and votes are destroyed. Your comments are emptied and detached from you, but the empty placeholders remain so other people's replies still make sense.
  • Object to processing, or ask us to restrict it.
  • Complain to the ICO at ico.org.uk.

Contact

Write to us about anything on this page — see contact.