LynBro ApS ("we", "us", "our") operates gyk.dk. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Danish data protection law.

Data Controller

LynBro ApS, Copenhagen, Denmark. For data protection inquiries, contact us at support@gyk.dk.

Data We Collect

Account data: name, email address, and optionally phone number — provided when you register.
Link data: URLs you shorten, custom slugs, descriptions, and expiration settings.
Analytics data: anonymised click statistics including country (via IP geolocation), browser, device type, and referrer. We do not store raw IP addresses in analytics.
Technical data: IP address (for rate limiting and security only, not stored long-term), cookies for session management, language preference, and theme preference.
Billing data: payment processing is handled entirely by Stripe. We do not store card numbers or payment details on our servers.

Why We Process Your Data

To provide and improve our link shortening, QR code, and analytics services.
To protect against abuse, fraud, and security threats (rate limiting, spam detection).
To send transactional emails (account verification, password reset). We do not send marketing emails without explicit consent.
To comply with legal obligations under Danish and EU law.

Legal Basis (GDPR Art. 6)

Consent — for optional cookies and marketing communications.
Contract performance — to provide the services you signed up for.
Legitimate interest — security, fraud prevention, and service improvement.
Legal obligation — tax records, law enforcement requests.

Data Retention

Account data is retained while your account is active and for 30 days after deletion. Analytics data is retained according to your plan (30 days for Free, 365 days for Premium). Technical logs are purged after 14 days.

Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact support@gyk.dk. We will respond within 30 days.

Cookies

We use strictly necessary cookies for session management, language, and theme preferences. Optional analytics cookies are only set with your consent. See our Cookie Policy for details.

International Transfers

Your data is processed within the EU/EEA. If transfers outside the EEA are necessary (e.g., for infrastructure providers), we ensure appropriate safeguards under GDPR Chapter V.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.