Privacy Policy

At 1U.FI, we are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding data handling when you use our URL shortening service.

1. Data Controller and Contact Information

Service Name: 1U.FI URL Shortener Service

Contact Email: lyhyita.ollaan@1u.fi

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us using the email address above.

2. Information We Collect

When you use our Service, we collect the following types of information:

2.1 Information You Provide

Original URLs: The full URLs you submit to be shortened are stored in our system to enable redirection functionality.
Custom Aliases: If you choose to create a custom alias for your shortened link, this information is stored.

2.2 Automatically Collected Information

IP Addresses: We collect and store IP addresses for security purposes, fraud prevention, and to protect our service from abuse and security threats.
Usage Statistics: We track click counts, timestamps, and access patterns for shortened links to provide analytics functionality.
Device and Browser Information: Technical information such as browser type, device type, and operating system may be collected.
Cookies: We use cookies to store language preferences and improve your experience. See Section 6 for more details.

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To create, maintain, and deliver shortened URLs and enable redirection functionality
Analytics and Statistics: To provide click statistics and usage analytics for shortened links
Security and Fraud Prevention: To detect, prevent, and address security threats, abuse, and fraudulent activities
Service Improvement: To analyze usage patterns and improve our Service's functionality and user experience
Compliance: To comply with legal obligations and respond to lawful requests from authorities

We do not use your personal data for automated decision-making, profiling, or marketing purposes. We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you create a shortened URL, you provide consent for us to process the necessary data to provide the service
Legitimate Interest: We process IP addresses and usage data based on our legitimate interest in ensuring service security, preventing abuse, and improving our services
Legal Obligation: We may process data to comply with applicable laws and respond to legal requests

5. Data Retention and Deletion

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:

IP Addresses: Retained for 30 days from collection for security and fraud prevention purposes
Shortened URLs and Original URLs: Retained for 12 months from the last access or use of the shortened link
Analytics Data: Click statistics and usage data are retained while the shortened link remains active, and for up to 12 months after last use
Cookie Data: Language preferences and settings stored in cookies are retained for a maximum of 13 months

You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, subject to legal obligations to retain certain information.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies: Required for the Service to function properly (e.g., language preferences)
Functional Cookies: Enhance functionality and personalization

Most browsers allow you to control cookies through their settings. However, disabling certain cookies may limit the functionality of our Service.

We do not use third-party advertising cookies or tracking pixels for marketing purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

Encryption: Data is encrypted both at rest and in transit using industry-standard SSL/TLS protocols
Access Controls: Strict access controls and authentication mechanisms limit access to personal data
Security Monitoring: Continuous monitoring for security threats and vulnerabilities
Regular Updates: Regular security updates and patches to our systems
Backup Systems: Regular automated backups ensure data availability and recovery

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining high security standards.

8. Third-Party Services and Data Sharing

We use the following third-party services to operate our Service:

Hosting & Security: We use a trusted global edge network provider for hosting, content delivery, and security services. This provider may process your data as part of these services under its privacy policy.

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

When required by law, legal process, or governmental request
To enforce our Terms of Service or protect our rights, property, or safety
To prevent fraud or security threats
With service providers who assist in operating our Service (under strict confidentiality agreements)

9. Your Rights (GDPR and Data Protection)

If you are located in the European Economic Area (EEA) or subject to GDPR, you have the following rights regarding your personal data:

Right of Access: You have the right to request a copy of the personal data we hold about you. We will respond within 30 days.
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data, subject to legal retention requirements
Right to Restrict Processing: You can request that we limit how we process your data
Right to Data Portability: You can request a copy of your data in a machine-readable format
Right to Object: You can object to processing based on legitimate interests
Right to Withdraw Consent: You can withdraw consent for data processing at any time
Right to Lodge a Complaint: You have the right to file a complaint with a data protection authority (in Finland: Tietosuojavaltuutetun toimisto)

To exercise any of these rights, please contact us at lyhyita.ollaan@1u.fi. We will respond to your request within 30 days.

10. International Data Transfers

Our Service is hosted on globally distributed infrastructure, which may involve data transfers outside the European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by the European Commission
Compliance with applicable data protection laws

11. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service functionality. We will notify users of significant changes by:

Updating the "Last updated" date at the top of this policy
Posting a notice on our website for material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: lyhyita.ollaan@1u.fi

By using 1U.FI, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.