1. Scope
This Privacy Policy explains how "yuri.llc" processes information when you use our websites and services.
Our commitment is simple: we do not sell personal information or user content, and we do not use your content for purposes unrelated to providing the services.
2. Information we process
Website
The main "yuri.llc" website is static. It stores your light or dark theme preference in your browser's local storage. We do not use advertising cookies or third-party analytics on the main website. We use JavaScript for this and loading live AS data from bgp.tools
Accounts and authentication
When you create or use an account, we may process your username, display name, profile information, credentials in protected form, authentication methods, sessions, connected accounts, permissions, login history, browser or device information, and security events. Your email address is stored and used only for abuse prevention. IP addresses associated with account activity are stored only for abuse prevention and account security. Our Authentik identity provider may share the account attributes needed to sign you in to another "yuri.llc" service.
API
The API processes request paths and parameters, IP addresses or Discord identifiers you ask it to look up, API credentials where required, rate-limit data, response status, and usage counters. The API does not log client IP addresses. It temporarily processes client IP addresses for rate limiting and stores only derived hashes for unique-visitor counters. Some endpoints request information from services such as Discord or Last.fm.
Link Shortener / https://l.yuri.llc/
Our link shortener uses Kutt. Accounts are managed through Authentik, our "yuri.llc" identity provider. Administrators can see which accounts created shortened links, but cannot see visitors' or accounts IP addresses. Users can view basic analytics for their links, including views, referrers, browsers, operating systems, and countries, but cannot see visitors' IP addresses. Kutt does not provide an option to disable analytics, otherwise we would.
Email, support, and reports
If you email us or submit a support, security, copyright, or policy report, we process the message, headers, attachments, contact details, and any information you include. Our mail system necessarily processes sender and recipient addresses, message content, routing data, spam-filter results, and delivery logs.
Operational and security data
Our reverse proxies, applications, databases, operating systems, monitoring stack, and security tooling may record IP addresses, timestamps, requested hosts and paths, HTTP methods and status codes, user agents, referrers, authentication events, error details, and suspicious activity. We limit IP tracking as much as possible and have it disabled on most services. CrowdSec and similar controls use this information to detect and block abuse. Metrics may be aggregated for reliability and capacity monitoring.
3. How we use information
We use information only when necessary to:
- Provide the service or action you requested.
- Create, authenticate, and secure your account.
- Prevent abuse, spam, fraud, and attacks.
- Respond when you contact us.
- Comply with a legal obligation.
We do not use personal information or user content for advertising, profiling, unrelated analytics, or training artificial intelligence models.
4. GDPR and data deletion
We respect the rights provided by the General Data Protection Regulation (GDPR). You may request access to, correction of, export of, restriction of, or deletion of your personal information by emailing [email protected].
Upon a verified request, we will delete your personal information from active systems without undue delay, except where we must retain specific information to comply with a legal obligation, protect the rights of others, or prevent abuse. Residual copies in backups will be removed through their normal expiration cycle and will not be restored except as part of disaster recovery.
5. When information is shared
We never sell personal information or user content. We disclose information only as needed to:
- Send a search or API request to the third-party provider you asked us to query.
- Deliver email to other providers and recipients.
- Make information public when you submit it to a public profile, repository, post, comment, or similar feature.
- Work with infrastructure or connectivity providers that process traffic on our behalf.
- Comply with valid legal process or protect rights, safety, users, and infrastructure.
- Complete an action you request or otherwise act with your permission.
Public content may be indexed, archived, copied, or redistributed by third parties outside our control.
6. Retention
Retention depends on the service and purpose:
- Account records remain while the account is active and for a limited period afterward when needed for recovery, security, abuse prevention, or legal obligations.
- User content remains until you delete it, an account or service is removed, or moderation requires removal. Copies may persist temporarily in backups and caches.
- Reverse-proxy logs are configured for short, size-limited rotation; other application, authentication, mail, database, system-journal, monitoring, and security records rotate according to service-specific settings and storage limits.
- API access logs omit raw client IPs under the current configuration, while rate-limit state is short-lived and hashed unique-counter records may remain as aggregate service statistics.
- Messages and reports are kept as long as needed to respond, maintain records of the request, enforce policies, or meet legal obligations.
We may preserve specific information longer when reasonably necessary for an active security incident, abuse investigation, dispute, backup recovery, or legal requirement. Deleting public content does not remove copies made independently by others.
7. Security
We use measures such as encrypted transport, access controls, isolated services, monitoring, and security filtering. No service can be guaranteed completely secure. Use unique credentials, protect recovery methods, and keep independent backups of important content.
8. Your choices and requests
You can update some information through the relevant account or service. You may ask us to provide, correct, export, or delete information associated with you by emailing [email protected]. We may need to verify your identity. A request may be limited where information is needed for security, abuse prevention, other users' rights, technical integrity, or legal obligations.
9. International use
Our services are available over the internet. Information may be processed in the locations where our self-hosted infrastructure and connectivity providers operate and may be transmitted to third-party services you choose to query.
10. Changes
We may update this policy when needed. We will always notify users when we change our privacy policy.
11. Contact
Privacy questions and requests should be sent to [email protected].
Last updated: July 11, 2026