Privacy Policy

1. Our Commitment to Privacy

At redzly, user privacy is a core principle. We only collect the minimal information necessary to deliver your public page and manage your dashboard. We do not sell personal data to advertisers or third-party brokers.

2. Information We Collect

• Account Information: Chosen username (handle), email address, and cryptographically hashed password (using secure salted hashing).
• Profile Data: Bio texts, social links, custom widgets, colors, fonts, and appearance preferences chosen in your editor.
• Media Files: Avatar images, banners, audio tracks, and background videos uploaded via integrated storage providers.
• Crypto Transactions: Generated invoices, deposit addresses, and on-chain transaction hashes for license validation. We never ask for real names, credit cards, or banking information.
• View Telemetry: Anonymized unique page visit counts with anti-spam rate limiting, completely free of invasive third-party tracking pixels.

3. How We Use Your Data

Collected information is used exclusively to:

• Render and deliver your public profile across the web;
• Authenticate your account and maintain active dashboard sessions;
• Automatically activate Lifetime Premium features upon confirmed payment;
• Protect the service against spam, automated abuse, and cyber threats.

4. Data Deletion & Right to Be Forgotten

You maintain full control over your profile content. You can update or delete links, widgets, or media at any time directly in the dashboard. Upon user request or account termination, all associated data is permanently erased from the database. Banned accounts are automatically and permanently purged after 30 days.

5. Cookies & Local Storage

redzly uses strictly functional cookies (HTTP-only secure JWT) to identify your session when signed in, as well as local browser storage (localStorage) for theme preferences. We do not use advertising trackers, marketing cookies, or third-party pixels (e.g. Facebook Pixel, Google Ads).

6. Security Measures

We implement industry-standard security protocols, including complete SSL/TLS encryption across all endpoints, salted password hashing, and rigorous server-side validation to protect against SQL injection and cross-site scripting (XSS).