Back

Privacy Policy

Last updated: June 6, 2026

Who we are

Bwebio is operated by DROLEZ LUDOVIC ("we", "us"). For the personal data described below, DROLEZ LUDOVIC acts as the data controller. You can contact us at contact@bweb.io.

When enabled, visiting a Bwebio link from this browser won't increment its click counter. Setting is stored locally on this device.

When enabled, anonymized page-view data is sent to Google Analytics 4 to help us understand usage. Disabling also prevents the GA script from loading.

What we collect

  • Account: your Google email address, used only to identify your account.
  • Links: the destination URL, the short code, the creation time, and a click counter.
  • Server logs: standard request logs (IP, user-agent) kept for short-term abuse prevention.
  • Billing data (Pro subscribers): when you subscribe to Pro, our payment processor Paddle collects your billing details (name, billing address, payment method, tax info) directly. We receive only a subscription identifier, status, and the email you used at checkout — never your full card details.

Legal basis for processing (GDPR)

  • Contract performance (Art. 6(1)(b)): creating your account, storing your links, and providing the Pro subscription you purchased.
  • Legitimate interests (Art. 6(1)(f)): keeping short-term server logs to prevent abuse, fraud, and security incidents, and to keep the Service reliable.
  • Legal obligation (Art. 6(1)(c)): retaining transaction records required by tax and accounting law (handled by Paddle as Merchant of Record).
  • Consent (Art. 6(1)(a)): loading Google Analytics, which only runs after you accept via the toggle above or the cookie banner. You can withdraw consent at any time.

Analytics & retention

  • Link clicks: we only keep an aggregate counter per link — no per-click event log, no IP, no referrer, no device fingerprint.
  • Google Analytics 4: if you accept the cookie banner, anonymized page views are sent to GA4 (IP anonymization enabled). You can revoke consent any time using the toggle above; revoking also blocks the GA script from loading on the next page load.
  • Retention: link records and their counters are kept for as long as your account exists. Server request logs are rotated within 30 days.
  • Opt-out: use the toggles above to stop your visits from being counted and to disable Google Analytics. You can also enable your browser's Do Not Track or use private browsing.
  • No ad pixels: we don't load advertising trackers, remarketing tags, or cross-site profiling tools.

How we use it

To operate the Service, redirect short links, count clicks, and enforce limits. We do not sell your data.

Cookies & storage

We store an authentication token in your browser to keep you signed in. No third-party advertising cookies are used.

Third parties

We share personal data with the following categories of recipients:

  • Google — for OAuth sign-in. Google's privacy policy applies to that step.
  • Paddle.com Market Limited — our Merchant of Record and payment processor. Paddle handles checkout, billing, tax calculation, invoicing, refunds, and subscription management for Pro subscriptions. See Paddle's privacy policy.
  • Hosting & infrastructure providers — for serving the application and storing database records on our behalf, under appropriate data processing terms.
  • Google Analytics — only if you grant analytics consent.

Security

We apply appropriate technical and organisational measures to protect your data, including TLS encryption in transit, encryption at rest for our database, scoped access controls, row-level security on user data, and limiting access to production systems to authorised personnel only. Payment card data never reaches our servers — it is collected and stored by Paddle in a PCI-DSS compliant environment.

International transfers

Some of our service providers (including Google and Paddle) may process data outside the UK/EEA. Where applicable, transfers rely on adequacy decisions or Standard Contractual Clauses approved by the European Commission.

Your rights

Subject to applicable law (including GDPR for EEA/UK residents), you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can delete any of your links from your dashboard. To delete your account or request a full data export, email contact@bweb.io. EEA and UK residents also have the right to lodge a complaint with their local supervisory authority.

Public data

Anyone with a short link can follow it and view the destination. Don't shorten links to private content you don't want exposed.