Privacy Policy

Non-binding translation: The German version is legally binding.

Privacy Policy

This privacy policy informs users about the type, scope, and purpose of the collection and use of personal data on the website lmy.de.

It is carried out in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Telecommunications-Telemedia Data Protection Act (TTDSG).

1. Responsible Party

David Stec-Kottke
Lilienstraße 7
12203 Berlin
Email: [email protected]

2. Definitions

2.1 Personal Data

Personal data is any information that can identify a natural person – e.g., name, email address, IP address, user behavior.

2.2 IP Address

The IP address may have a personal reference depending on the configuration, especially if it is assigned permanently (static) or linked with other data.

3. Collection and Storage of Personal Data During Website Visits

When accessing our website and when accessing a short link created through our service, our hosting provider and the content delivery service we use (see section 8) automatically collect technical access data (server log files) that your browser transmits. This includes:

  • IP address
  • Date and time of the request
  • Accessed short link or page
  • Referrer URL (the previously visited page)
  • Browser and operating system used
  • Country or approximate geographic location (derived from the IP address)

This data is processed to ensure smooth operation, to evaluate system security, and to provide click statistics and targeting functions (see section 4). The legal basis is Article 6 (1) (f) GDPR (legitimate interest in the operation, security, and functionality of the service). The log files are stored for a period of 14 days and then deleted or anonymized.

In case of specific indications of abuse or legal violations, we additionally store the following data for up to 14 days based on a legitimate interest according to Article 6 (1) (f) GDPR:

  • IP address
  • IP access area/country
  • Browser used
  • Time of access

4. Click Statistics and Targeting Functions

Our service allows registered users to evaluate click statistics for the short links they create and, depending on the subscribed plan, to use geo-targeting, device targeting, and language targeting. For this purpose, the following data is processed and assigned to the respective link with each access to a short link:

  • Time of the click
  • Approximate geographic location (country/region, derived from the IP address)
  • Device type (e.g., desktop, mobile device, tablet)
  • Browser language setting
  • Browser and operating system used

This data is displayed exclusively in aggregated or pseudonymized form in the statistics view of the respective user account. The legal basis is Article 6 (1) (b) GDPR (contract fulfillment towards the link creator) as well as Article 6 (1) (f) GDPR (legitimate interest in providing the function).

Short links created through a free account are stored, including the associated statistical data, for a duration of 60 days without access; after that, they are automatically deactivated and deleted without guarantee of further accessibility. Short links created through a Pro or Enterprise account are stored indefinitely for the duration of the respective user account.

5. Registration and Paid Accounts

To use a Pro or Enterprise account, registration is required. In this process, we collect:

  • Name
  • Email address
  • Password (stored encrypted)

For payment processing, we use the payment service providers PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) and Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). In the context of payment, the necessary data (including name, payment amount) is transmitted to PayPal. The privacy policies of PayPal and Stripe also apply. The legal basis for processing in the context of registration and payment is Article 6 (1) (b) GDPR (contract fulfillment).

6. Use of Google AdSense

This website uses Google AdSense, a service of Google Ireland Limited for integrating advertisements. In this context, cookies may be set and user data (e.g., IP address, usage behavior) may be collected to display personalized advertising. As part of the processing by Google, data may be transmitted to servers in third countries, particularly to the USA. Google refers to corresponding guarantees, including EU standard contractual clauses.

Legal basis:

The processing is based on your consent according to Article 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG. You can manage or revoke your consent at any time via the cookie banner.

Further information: Privacy policy of Google

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies. We distinguish between technically necessary cookies that are required for the operation of the website and the core functions of the service (legal basis: § 25 (2) No. 2 TTDSG, Article 6 (1) (f) GDPR), and optional cookies, especially for advertising and analysis, which are only set with your consent (legal basis: Article 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG).

To obtain and manage your consent, we use a cookie consent tool. An overview of the cookies used, their purpose, and storage duration can be found in the respective cookie banner. You can change or revoke your settings there at any time.

8. Cooperation with Processors and Third Parties

For the operation of this website, we use the hosting services of:

Śląsk Data Center – LiveNet Sp. z o.o.
Grodzka 1
42-600 Tarnowskie Góry
Poland

We have a contract for processing with our hosting provider in accordance with Article 28 GDPR. Data processing takes place within the European Union.

Additionally, we use the service Cloudflare, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare acts as a Content Delivery Network (CDN) and protection against attacks (e.g., DDoS protection) and processes technical access data, particularly IP addresses, even before requests reach our hosting provider. We have a contract for processing with Cloudflare in accordance with Article 28 GDPR. Since data processing by Cloudflare, Inc. may also occur outside the European Union, particularly in the USA, the transfer is based on EU standard contractual clauses in accordance with Article 46 (2) (c) GDPR.

If further external service providers (e.g., payment processing, advertising) are commissioned as part of data processing, this also occurs based on a contract for processing in accordance with Article 28 GDPR or a legitimate interest according to Article 6 (1) (f) GDPR.

9. Disclosure to Authorities

We only disclose personal data if we are legally obligated to do so, e.g., for prosecution or danger prevention.

10. Data Security

To protect your data, we implement appropriate technical and organizational security measures. These are regularly reviewed and adjusted to the state of the art.

11. Rights of Affected Persons

You have the following rights at any time:

  • Information about your stored data (Article 15 GDPR)
  • Correction of incorrect data (Article 16 GDPR)
  • Deletion of your data (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Objection to certain processing (Article 21 GDPR)
  • Data portability, if applicable (Article 20 GDPR)

Please send your request to:

Email: [email protected]

12. Right to Complain to the Supervisory Authority

You have the right to complain to a data protection supervisory authority.

Responsible for Berlin is, for example:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
https://www.datenschutz-berlin.de

13. Note on Link Reporting (Abuse)

Users can report problematic links via https://lmy.de/report. These will be checked within 48 hours and deleted in case of violation.

14. Orders in the Shop (Digital Products)

When purchasing digital products through our shop, we process the data necessary for contract processing (name, email address, transaction data) based on Article 6 (1) (b) GDPR. Payment processing is done via PayPal or Stripe (see above); for this, the necessary payment data is transmitted to PayPal. The purchased product will be sent as a PDF to the email address provided at the time of order. We store order data only as long as necessary for contract processing and legal retention obligations.

15. Consent and Currency

By using this website, you agree to this privacy policy.

This privacy policy is currently valid (as of: 27.07.2026) and may be adjusted in case of legal or technical changes.