FirstURL
DE

Legal

Privacy

We collect as little data as possible. Here is exactly what and why.

1. Controller

YOURWEBMEDIA
Roman Baumgärtner
Ostlandstraße 5
49565 Bramsche
Email: [email protected]
Phone: 05461 7084222

2. Summary

3. Hosting and server log files

This website is hosted by febas.de, a hosting service operated by the controller. Data is therefore not passed on to an external hosting provider.

When you visit the website, technically necessary data is processed in server log files: IP address, date and time, requested address, HTTP status code, amount of data transferred and user agent. This serves to deliver the website, analyse errors and fend off attacks (Art. 6(1)(f) GDPR, legitimate interest in secure and stable operation). Log files are deleted automatically after 7 days.

4. Cloudflare

To protect against attacks (e.g. DDoS) and for fast delivery we use the content delivery and security network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All requests to this website are routed through Cloudflare's servers, which process in particular your IP address, date and time, the requested address and technical information about your browser and device. To detect bots, Cloudflare may set strictly necessary cookies (e.g. “__cf_bm”, lifetime 30 minutes).

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the security and availability of the website. Setting the security cookies is permitted without consent under § 25(2) no. 2 TDDDG as it is strictly necessary. A data processing agreement has been concluded with Cloudflare. For transfers to the USA, Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR); EU standard contractual clauses apply in addition. More information: Cloudflare privacy policy.

5. Creating short links

When you create a short link we store the target URL, the creation time, your settings (wait time, custom alias, expiry date) and a hash of your IP address. The hash is created with a secret key and cannot be turned back into the IP address. It is used only to prevent abuse and to limit new links per hour (Art. 6(1)(f) GDPR). Rate-limit entries are deleted after 24 hours at the latest.

Short links are stored until you delete them via your private management link or the chosen expiry date is reached. Please do not include personal data in the target URL – anyone who knows the short link can see the target.

6. Opening short links

When a short link is opened we only increase an anonymous counter (clicks per day and link). No personal data is stored. The redirect page makes sure the target site cannot see where you came from (no referrer).

7. Storage in your browser

The “My links” list and your light/dark theme choice are stored only locally in your browser (localStorage) and are never sent to us. This is strictly necessary for the functions you requested (§ 25(2) no. 2 TDDDG). You can remove them at any time with “Clear list” or via your browser settings.

8. Abuse reports and contact

When you report a link or contact us by email we process the information you provide and, if given, your email address to handle your request (Art. 6(1)(f) GDPR). The data is deleted once the request has been handled unless statutory retention obligations apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Just contact us by email.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

Last updated: October 2026