Privacy Policy

1. Introduction

Welcome to gotchya.lol. We are committed to protecting your privacy and ensuring transparency in how we collect, use, and share your personal information. This Privacy Policy explains our data practices and your rights regarding your personal data.

By using gotchya.lol ("the Service"), you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

This policy applies to all users of gotchya.lol, regardless of location. Additional privacy rights may apply based on your jurisdiction (see Section 12).

2. Information We Collect

2.1 Information You Provide

When you create an account or use the Service, we collect:

• Account Information: Username, email address, password (encrypted)
• Profile Information: Display name, bio, avatar, banner image, profile theme
• Content: Links you create, titles, descriptions, custom icons, ordering preferences
• Communication: Messages you send through our platform, support inquiries
• Payment Information: Billing details (processed securely through third-party processors; we do not store complete credit card numbers)
• Verification Data: Information provided for identity verification or age verification

2.2 Automatically Collected Information

We automatically collect technical and usage data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution
• IP Address: Your IP address and approximate geographic location (city/country level)
• Usage Data: Pages visited, links clicked, time spent on pages, referral sources
• Analytics Data: Profile views, link clicks, engagement metrics, visitor demographics
• Cookies and Tracking: Session cookies, authentication tokens, preference cookies, analytics cookies
• Device Fingerprinting: Browser fingerprints for security and fraud prevention
• Log Data: Error logs, access logs, security event logs

2.3 Information from Third Parties

We may receive information from:

• OAuth Providers: If you sign in using third-party services (Google, GitHub, etc.)
• Social Media Platforms: Public profile information from linked social accounts
• Payment Processors: Transaction confirmation and billing status
• Analytics Services: Aggregated usage statistics and trends
• Security Services: Fraud detection and prevention data

3. How We Use Your Information

3.1 Service Provision

• Create and manage your account
• Display your profile and links to visitors
• Process link clicks and track analytics
• Enable communication features (messaging, follows)
• Provide customer support and respond to inquiries
• Process payments and subscriptions

3.2 Service Improvement

• Analyze usage patterns and trends
• Develop new features and improvements
• Test and optimize platform performance
• Conduct research and analytics
• Personalize your experience

3.3 Safety and Security

• Detect and prevent fraud, abuse, and illegal activity
• Enforce our Terms of Service
• Monitor for security threats and vulnerabilities
• Verify identity and prevent unauthorized access
• Detect spam and bot activity
• Moderate content and enforce community guidelines

3.4 Communications

• Send transactional emails (verification, password resets, receipts)
• Notify you of account activity and security alerts
• Send service updates and announcements
• Provide marketing communications (with your consent; opt-out available)

3.5 Legal Compliance

• Comply with legal obligations and law enforcement requests
• Respond to subpoenas and court orders
• Protect our rights and property
• Enforce legal agreements

4. Information Sharing and Disclosure

4.1 Public Information

The following information is public by default and visible to anyone:

• Your profile page (username, bio, avatar, banner)
• Your visible links and their titles/descriptions
• Your profile view count (unless you hide it)
• Badges and verification status
• Content you share publicly

4.2 Service Providers

We share data with trusted third-party service providers who help us operate the Service:

• Hosting Providers: Infrastructure and server hosting
• Cloud Storage: Storage of user-uploaded files (avatars, banners)
• Payment Processors: Subscription billing and payment processing
• Email Services: Transactional and marketing email delivery
• Analytics Providers: Usage analytics and performance monitoring
• CDN Providers: Content delivery and performance optimization
• Security Services: DDoS protection, fraud detection, content moderation

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory requests
• National security requirements
• Emergency situations involving danger of death or serious physical injury

4.4 Business Transfers

If gotchya.lol is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change and your options regarding your data.

4.5 With Your Consent

We may share your information in other circumstances with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Active Accounts: Data retained while account is active
• Deleted Accounts: Most data deleted within 30 days; some data retained for legal/security purposes
• Transaction Records: Retained for 7 years for tax and accounting purposes
• Log Data: Retained for 90 days unless needed for security investigations
• Backup Systems: Deleted data may persist in backups for up to 90 days
• Legal Holds: Data retained longer if required by law or legal proceedings

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and core functionality (cannot be disabled)
• Analytics Cookies: Help us understand how visitors use the Service
• Preference Cookies: Remember your settings and choices
• Marketing Cookies: Track campaign effectiveness (with your consent)

6.2 Third-Party Cookies

We use third-party analytics services (Google Analytics, etc.) that set their own cookies. You can learn about their practices and opt-out through their respective privacy policies.

6.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may limit functionality. You can also use our cookie preference center to manage non-essential cookies.

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Password Security: Passwords hashed using bcrypt with salt
• Access Controls: Strict employee access limitations
• Security Monitoring: 24/7 monitoring for suspicious activity
• Regular Audits: Periodic security assessments and penetration testing
• Incident Response: Procedures for handling security breaches
• Data Minimization: We collect only necessary data

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Security Breach Notification: If we experience a data breach affecting your personal information, we will notify you within 72 hours via email and through the Service.

8. Your Privacy Rights

8.1 Access and Portability

You have the right to access and export your personal data. You can download your data through your account settings. Exports include your profile information, links, analytics data, and message history.

8.2 Correction

You can update your profile information, email address, and other account details through your account settings at any time.

8.3 Deletion

You have the right to delete your account and personal data. Account deletion can be initiated through account settings. Most data is deleted within 30 days, though some data may be retained for legal or security purposes as described in Section 5.

8.4 Objection and Restriction

You can object to certain data processing activities or request restriction of processing. Contact us at privacy@gotchya.lol to exercise this right.

8.5 Marketing Opt-Out

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or through your account settings. Note that you cannot opt out of transactional emails related to your account.

8.6 Do Not Track

Some browsers have "Do Not Track" (DNT) features. We currently do not respond to DNT signals. You can control tracking through our cookie settings and browser settings.

9. Children's Privacy

gotchya.lol is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us immediately at privacy@gotchya.lol.

Users between 13 and 18 should have parental consent to use the Service. We recommend parents monitor their children's online activities.

If we learn we have collected information from a child under 13, we will delete that information as quickly as possible. If you believe we have information from a child under 13, please contact us.

10. International Data Transfers

gotchya.lol is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries.

Data protection laws in the United States may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States and other countries.

For users in the European Economic Area (EEA), we implement appropriate safeguards for international transfers, including Standard Contractual Clauses approved by the European Commission.

11. Third-Party Services and Links

The Service allows you to link to third-party websites and services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of third parties.

When you click on links to third-party sites or use third-party services through gotchya.lol, those third parties may collect information about you. We encourage you to review the privacy policies of any third-party services you use.

Link Tracking: We track when visitors click on your links to provide analytics. This tracking occurs before redirecting to the destination URL.

12. Region-Specific Rights

12.1 European Economic Area (GDPR)

If you are in the EEA, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on: (1) your consent, (2) contractual necessity, (3) legal obligations, (4) legitimate interests, and (5) protection of vital interests.

12.2 California (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect, use, disclose, and sell
• Access their personal information
• Delete their personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

To exercise these rights, contact us at privacy@gotchya.lol. We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.

12.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have region-specific privacy rights not listed here, contact us at privacy@gotchya.lol.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (to the address on file)
• Display a prominent notice on the Service
• For material changes, provide 30 days notice before changes take effect

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with changes, you should discontinue use and delete your account.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Response Time: We will respond to privacy inquiries within 30 days. For urgent security matters, we aim to respond within 24 hours.

EU Representative: For GDPR matters, you may contact our EU representative at eu-rep@gotchya.lol.