YurlieYour data stays yours
Most Yurlie tools run entirely in your browser, nothing you type is sent to our servers. This policy explains what little we do collect and why.
Short version:When you use a browser-side tool (JSON formatter, CIDR calculator, etc.), your input never leaves your device. We collect basic analytics (page views, no fingerprinting) and standard web server logs. We don't sell any data.
1. What we collect
- Server logs: IP address, requested URL, user-agent, response code, timestamp. Standard web server logs retained for 30 days for security and debugging.
- Anonymous analytics: page views and country-level location, collected without cookies or fingerprinting. We use a self-hosted, privacy-respecting analytics tool.
- Account data (optional): if you create an account: email address, hashed password, API usage counters. We don't require real names.
- API requests: if you use the API, requests are logged (endpoint, timestamp, response time) tied to your API key. Input payload content is not stored.
2. What we do NOT collect
- Content typed into browser-side tools (JSON, IP addresses, text, code - all stays local)
- Advertising identifiers or cross-site tracking cookies
- Device fingerprints
- Payment card details (handled entirely by our payment processor)
3. How we use it
We use collected data exclusively to:
- Keep the service running and debug issues
- Understand which tools are used (so we can build more useful ones)
- Send transactional emails: password reset, API key notifications, when you have an account
- Enforce rate limits and prevent abuse
4. Third parties
We use a small number of third-party services. None of them receive your tool input data:
- Hosting / CDN: your IP and request metadata may pass through our cloud infrastructure provider
- Payment processing: if you subscribe, your card details go directly to our payment processor; we never see them
- Transactional email: email delivery for account-related notifications
We don't use advertising networks, data brokers, or social media tracking pixels.
5. Cookies
We use one functional cookie to remember your theme preference (light/dark mode). This cookie contains no personal data and is not shared with third parties. No cookie consent banner is required because we don't use tracking or advertising cookies.
If you have an account, a session cookie is used to keep you signed in.
6. Data retention
- Server logs: 30 days
- Analytics aggregates: indefinite (anonymized)
- Account data: retained until you delete your account
- API logs: 90 days rolling
7. Your rights
If you have an account, you can request a copy of your data, request deletion, or correct inaccurate information by emailing privacy@yurlie.com. We'll respond within 30 days.
If you're in the EU/EEA, you have rights under the GDPR including the right to erasure, portability, and to lodge a complaint with your local supervisory authority.
8. Changes to this policy
If we make material changes, we'll update the "last updated" date at the top and, if you have an account, send a notification email. Continued use after changes constitutes acceptance.
Privacy questions?
We'll get back to you within 30 days.