This policy explains how Vylo (vylo.cc) handles personal data. It covers publishers who have an account and visitors who open a Vylo short link.
Publishers: account data
- Account details: your email address, username and password. Passwords are stored only as a secure one-way hash (Argon2id); we can’t see them.
- Payout details: the payout method and account or wallet address you enter, plus your withdrawal history.
- Your links and stats: the links you shorten, their titles, and view and earnings statistics.
- Security data: a keyed hash of your latest IP address (used to stop self-clicks and protect your account), login times, and two-factor settings if you turn them on.
We use this data to run your account, count and pay your earnings, prevent fraud, and send service emails such as email confirmation and password resets. We don’t sell your data.
Visitors: link page data
When someone opens a short link, we record what we need to count views fairly and stop fraud:
- A hashed IP address. We store a keyed hash of your IP address, not the address itself. IPv6 addresses are grouped by their /64 network before hashing. The hash lets us apply limits such as one paid view per IP per publisher per day.
- Country and network. Your approximate country and the network (ASN) your IP belongs to, looked up from the IP address. This sets the publisher’s payout rate and helps detect VPN and datacenter traffic.
- Referrer site. The domain of the page that linked to the short link, if your browser sends it.
- Bot check. Your browser’s user-agent is checked to filter out bots. We don’t store it.
Raw view records are deleted after 90 days. We keep aggregated statistics (daily totals per link and per country), which don’t identify anyone.
Cookies
- Essential cookies keep you logged in, protect forms against cross-site attacks, show one-time messages after you submit a form, and remember a referral code for 30 days. They don’t track you across other sites.
- Theme and notice preferences (light or dark mode, cookie notice dismissed) are stored in your browser’s local storage.
- Cloudflare Turnstile runs the “I’m not a robot” check and may use its own cookies or similar technology to tell people from bots.
- Advertising. Link pages show ads from third-party ad networks. Those networks may set their own cookies or use similar technology to show and measure ads. Their use of data is governed by their own privacy policies, not this one.
Service providers
We share data only with providers that help us run Vylo:
- our hosting provider, which runs the servers and database;
- Cloudflare, for security, network delivery and the human check;
- our email provider, to send account emails;
- ad networks, which receive the data their ad code collects in your browser on link pages;
- payment providers, when we send you a payout.
We may also disclose data when the law requires it, or to protect users and the service against fraud and abuse.
How long we keep data
- Raw visitor view records: 90 days.
- Aggregated statistics: kept for as long as the link or account exists.
- Account, earnings and payout records: for as long as your account is open, and afterwards as long as needed for accounting, tax, fraud prevention or legal reasons.
- Contact messages and abuse reports: as long as needed to handle them.
Your rights
You can ask for a copy of your personal data, ask us to correct it, or ask us to delete your account. Email [email protected] from the address on your account. Depending on where you live, you may have additional rights, including the right to complain to a data protection authority. We may keep some records after deletion where the law requires it or to prevent fraud.
Children
Vylo is not meant for children. You must be an adult to earn on Vylo, and we don’t knowingly collect data from children under 13 (or the minimum age where you live).
Security
We use encrypted connections, hashed passwords, hashed IP addresses and optional two-factor login for administrators. No system is perfectly secure, so please use a strong, unique password.
Changes to this policy
We may update this policy. When we do, we will change the date at the top of this page, and tell you about significant changes on the site or by email.
IP geolocation
Country and network lookups use IP Geolocation by DB-IP, licensed under CC BY 4.0.
Contact
Privacy questions: [email protected].