Privacy
urlhub uses no cookies, analytics or ads. Below we describe which data arises when you use it and what happens to it.
Who is responsible
The data controller is Adam Tomaś. For anything about your data, write to aex.tomas@gmail.com.
The links you enter
The links you enter go to our server, which fetches the pages they point to or asks the services they belong to (YouTube, Vimeo, Spotify, SoundCloud, TikTok, X, Wikipedia, GitHub). Those pages and services see our server's address, not yours. Results are kept in the server's memory for a short time (up to 30 minutes, videos up to an hour) and are gone when it restarts. If you paste or load from a file a whole text (such as an email), it goes to the server only to find the links in it; the text itself is not stored anywhere. We do this to show the preview you ask for (legitimate interest, Art. 6(1)(f) GDPR). Entering links is voluntary, but without them there is nothing to show. Do not enter links that themselves hold data you do not want to pass on, such as addresses with a password or token.
Preview pictures
The pictures in the tiles and the table are fetched by our server – from the servers of the sites the links lead to – made smaller and only then shown to your browser. Those servers therefore see our server's address, not yours, and cannot set cookies on you. The smaller pictures are kept briefly in the server's memory (gone at a restart) and by your browser for up to a day. Links straight to video files are shown without a preview, since the film would play from another server.
The page address and short links
The list of links, the view, the advanced option and the language are part of the page address, so it can be shared. A short link (/c/…) is made with a button and stores only these four things on our server, with no IP address and no account; anyone who has it sees the list. A short link nobody opened for 90 days is deleted, and it leaves the daily backups 14 days later.
Cookies and browser storage
urlhub stores no cookies. Recent queries go to your browser's storage (localStorage) only at your request, after you turn on "Remember recent queries on this device". They are never sent anywhere, and turning the switch off deletes them.
Server logs
The server logs a shortened IP address (without its last part, so it does not point to a particular device), the date and time and the kind of request, without the links you entered. They are used only to keep the site running and secure (legitimate interest, Art. 6(1)(f) GDPR) and are overwritten by newer ones once they fill 30 MB, usually after a few weeks. The full IP address is held in the server's memory only, just to limit the number of requests from one address, and is deleted usually within a quarter of an hour, at the latest when the server restarts. The web server in front (Apache) keeps no log of visits; only on technical errors its error log may hold an IP address and the page's address, and it is deleted after 30 days.
Where the data is and who receives it
The server runs in an OVHcloud data centre in France (European Union), on our behalf. Links also go to the services we ask about them; some of them (such as YouTube and GitHub) are based in the USA, but they do not get your IP address. We do not sell data, do not profile you and make no automated decisions about you.
Cloudflare
Traffic to the site goes through Cloudflare's network, which protects it from attacks and speeds it up (legitimate interest, Art. 6(1)(f) GDPR). Cloudflare processes the IP address and technical request data as described in its privacy policy. The company is based in the USA and transfers data under the EU-US Data Privacy Framework.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to object to it. You can also lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office of Poland, UODO (uodo.gov.pl).