1. Introduction and Scope

This Privacy Policy describes how UniversalDL collects, uses, and protects information when you use our service.

2. Information We Collect

• Account information such as email, display name, and hashed password.
• Download metadata such as title, platform, and quality. URLs are not stored in anonymous mode.
• Usage data including API calls and download counts.
• Authentication tokens stored in session cookies.
• Log data including IP addresses, hashed after 30 days.

3. How We Use Information

• Provide and improve the service.
• Send email notifications when enabled.
• Detect abuse and enforce rate limits.
• We do not sell user data.

4. Information We Do Not Collect

• We do not store downloaded media files.
• We do not track browsing outside UniversalDL.
• We do not serve ads or allow advertisers access to your data.
• Anonymous mode prevents URL storage.

5. Data Sharing

We share data only with the following providers to operate the service:

• Razorpay for payment processing, PCI DSS compliant.
• Sentry for error monitoring, anonymized.

No other third party data sharing occurs.

6. Data Retention

• Download history: 7 days for Free, forever for Pro.
• IP addresses: hashed after 30 days, deleted after 90 days.
• URLs: nullified after 90 days, immediate in anonymous mode.
• Account data retained until deletion request.

7. Your Rights

You can access, correct, delete, or export your data from Settings. EU users have GDPR rights including portability and deletion.

8. Security Measures

• HTTPS enforcement and HSTS headers.
• bcrypt password hashing.
• CSRF protection on forms.
• Rate limiting and abuse detection.

9. Cookies

• Session cookie for authentication.
• Theme preference stored in localStorage, not a cookie.
• No advertising cookies.
• No analytics cookies by default. Plausible is supported if configured.

10. Children's Privacy

UniversalDL is not directed to children under 13 and does not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy periodically. Continued use of the service indicates acceptance of changes.

12. Contact

For privacy inquiries, contact privacy@universaldl.com.