Privacy Policy | BlitzLy.com

BlitzLy Ltd. ("we," "our," or "us") is committed to protecting your privacy and ensuring that your personal data is handled transparently and securely. This Privacy Policy describes how we collect, use, store, and disclose information when you access or use our website Blitz-Ly.com (the "Site") and related services (collectively, the "Services").

                Key Summary: We collect minimal data necessary to provide our URL shortening and monetization services. We implement strong security measures and never sell your personal information. You have control over your data through various rights described in Section 7.
            

1. Information We Collect

1.1 Information You Provide Directly

Account Registration

Username (chosen by you)
Email address (used for login and notifications)
Securely hashed password (we never store plaintext passwords)

URL Creation

Original long URLs you submit for shortening
Optional titles or descriptions for your own management

Withdrawal Requests

Payment method (PayPal or Revolut)
Payout email address
Withdrawal amount (minimum $1.00 USD)

Telegram Bot Interaction

Telegram user ID (if you opt to link your account)
Commands sent to our admin bot

1.2 Information Collected Automatically

Click & Analytics Data

For each click on shortened URLs:

Timestamp and short code identifier
Country-level geolocation (derived from IP address)
Referrer category (e.g., Google, Facebook, Direct)
Device/browser type (anonymized)
Validation status (whether click counted for earnings)

Technical Data

IP address (for security and fraud prevention)
Browser type and version
Pages visited and interaction patterns

2. How We Use Your Information

Purpose	Data Used	Legal Basis
Account management and authentication	Username, email, password hash	Contractual necessity
URL shortening and redirection	Original URLs, short codes	Contractual necessity
Click validation and earnings calculation	Click timestamps, country, referrer	Legitimate interest
Payment processing	Payout email, withdrawal amount	Contractual necessity
Fraud prevention	IP address, device information	Legitimate interest
Service improvement	Aggregated analytics	Legitimate interest

3. Data Sharing and Disclosure

3.1 Service Providers

Payment processors: PayPal and Revolut (payout email only)
Email services: For transactional emails (password resets, notifications)
Geolocation API: ipapi.co (country-level lookup from IP)
Hosting provider: Secure cloud infrastructure

3.2 Legal Requirements

We may disclose information when required by law or to protect our rights, including:

Responding to valid legal process (subpoenas, court orders)
Investigating fraud or illegal activity
Complying with applicable laws and regulations

4. Data Retention

Data Type	Retention Period
Account information	Until account deletion
Click records	Up to 36 months
Withdrawal records	5 years (for tax compliance)
Password reset tokens	1 hour (expiration) + 30 days backup
Telegram bot logs	12 months

5. Data Security

Technical Measures

HTTPS encryption for all data transmission
Password hashing using bcrypt algorithm
Regular security updates and patches
Limited access to production systems

Organizational Measures

Employee confidentiality agreements
Two-factor authentication for admin access
Regular security audits

Note: While we implement robust security measures, no system is 100% secure. Please safeguard your login credentials and notify us immediately at info@blitz-ly.com if you suspect unauthorized access to your account.

6. Your Rights and Choices

6.1 Access and Correction

You may access and update your account information through your dashboard settings.

6.2 Data Portability

Request a machine-readable copy of your data by emailing info@blitz-ly.com.

6.3 Erasure ("Right to Be Forgotten")

You may request deletion of your account and associated data, subject to legal retention requirements.

6.4 Objection and Restriction

You may object to certain processing activities based on legitimate interests.

6.5 Cookie Controls

Adjust your browser settings to manage cookies (essential cookies are required for service functionality).

7. International Data Transfers

As a Bulgaria-based service, we primarily process data within the EU. When transfers outside the EU occur (e.g., to payment processors), we implement appropriate safeguards including:

Standard Contractual Clauses
GDPR-compliant data processing agreements
Encryption during transmission

8. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

Updated "Last Updated" date
Site notification banner
Email (for significant changes)

9. Contact Us

For questions or to exercise your data rights:

We respond to valid requests within one (1) month.