Privacy Policy
Last updated: January 18, 2026
Beta Notice: URLYUP is currently in Beta. During this period, do not use URLYUP for private, sensitive, or production data. Use only for development and testing purposes.
Summary: We collect minimal data necessary to provide our tunnel and URL services. We do not sell your personal information. URLYUP is a shared reverse proxy - traffic may be accessed by you, our support team, or legal authorities when required. For isolated infrastructure, upgrade to SETIP.IO.
1. Introduction
URLYUP ("we", "us", or "our") operates the urlyup.com website and provides instant public HTTPS URLs for local development servers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
Our infrastructure runs on dedicated servers in data centers located primarily in Europe and North America. We select infrastructure providers that meet strict security and privacy standards. By using URLYUP, you acknowledge that your data may be processed in these regions in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create a tunnel or request a URL, we collect:
- Email address (for connection identification)
- IP address (for rate limiting and abuse prevention)
2.2 Service Data
When you use our services, we automatically collect:
- Connection timestamps (when tunnels are created/closed)
- WireGuard public keys (for VPN establishment)
- Assigned URLs and port mappings
- Basic request metadata (URL paths, response codes) for debugging
2.3 Your Traffic Data
Traffic passing through URLYUP tunnels is encrypted via WireGuard. We do not routinely inspect or log the content of your traffic. However, traffic data may be accessed by:
- You: Upon request, to debug or review your own traffic
- Support team: When assisting with technical issues you report
- Legal authorities: When required by law, court order, or government request
2.4 Shared Infrastructure & TLS Limitations
URLYUP operates as a shared reverse proxy service. Your traffic passes through infrastructure shared with other customers. Per-customer isolation is not guaranteed.
TLS Certificate Sharing: All URLYUP URLs (*.urlyup.com) use a shared wildcard TLS certificate. While your traffic is encrypted in transit, the TLS termination occurs on shared infrastructure. This means:
- The private key for TLS decryption is managed by URLYUP, not you
- Traffic is decrypted at our proxy before being forwarded to your local service
- Other customers share the same certificate infrastructure
If you require dedicated TLS certificates for your own domain, end-to-end encryption control, or isolated infrastructure, consider upgrading to SETIP.IO which offers tenant-isolated Points of Control (POCs) with dedicated resources and custom domain certificates.
2.5 Cookies and Tracking
We use minimal cookies for:
- Session management (if applicable)
- Rate limiting
We do not use third-party analytics or advertising cookies on urlyup.com.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide tunnel services | Email, IP, WireGuard keys | Contract performance |
| Rate limiting & abuse prevention | IP addresses, timestamps | Legitimate interest |
| Service improvements | Aggregated usage statistics | Legitimate interest |
| Communication | Email address | Consent / Contract |
| Legal compliance | As required | Legal obligation |
4. Data Retention
We maintain logs of service activity. All logs are retained for a maximum of 120 days unless a longer retention period is required by law, legal proceedings, or government request.
- Email addresses: Retained while tunnels are active, purged 30 days after last use
- Connection logs: Up to 120 days retention
- IP addresses: Up to 120 days for abuse detection and legal compliance
- WireGuard keys: Deleted when tunnel session ends
- Request logs: Up to 120 days (may include URLs, response codes, timestamps)
5. Data Sharing and Transfers
We do not sell your personal information. We may share data with:
5.1 Infrastructure Providers
Our services run on infrastructure provided by select hosting partners in Europe and North America. Your data is processed in their data centers subject to their security measures and certifications. We only partner with providers that maintain industry-standard security practices and comply with applicable data protection regulations.
5.2 Legal Requirements
We may disclose information when required by law, court order, or government request, or to protect our rights, safety, or property.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will notify you of any such change.
6. Data Security
We implement security measures including:
- WireGuard encryption for all tunnel traffic
- TLS encryption for web interfaces
- Automatic HTTPS for all generated URLs
- No persistent storage of tunnel content
- Regular security updates and patching
While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for securing your local services and WireGuard configurations.
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request removal of your data
- Portability: Export your data in a standard format
- Objection: Object to certain processing activities
- Restriction: Limit how we use your data
To exercise these rights, contact us at privacy@setip.io. We will respond within 30 days.
8. International Users
Our servers are located in data centers primarily in the European Union and North America. If you access our services from other regions, your data will be transferred to these locations. By using our services, you consent to this transfer. For EU users, data processing complies with applicable GDPR requirements.
9. Children's Privacy
URLYUP is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
10. Acceptable Use
You may not use URLYUP for any unlawful or prohibited purpose. The following activities are strictly prohibited:
- Distributing malware, viruses, or malicious code
- Phishing, fraud, or impersonation
- Hosting or distributing illegal content
- Conducting DDoS attacks or network abuse
- Sending spam or unsolicited communications
- Circumventing security measures or unauthorized access attempts
- Any activity that violates applicable laws or regulations
We reserve the right to investigate and report suspected illegal activities to law enforcement authorities.
11. Account Termination
We reserve the right to suspend or terminate your access to URLYUP at any time, without prior notice, for any reason including but not limited to:
- Violation of this Privacy Policy or Terms of Service
- Engaging in prohibited activities as described above
- Abuse of the service or its infrastructure
- Requests from law enforcement or government agencies
- Discontinuation of the service (in whole or in part)
Upon termination, your right to use the service ceases immediately. We are not liable for any damages resulting from termination.
12. Service Availability (Beta)
URLYUP is provided on an "as-is" and "as-available" basis during the Beta period. We make no guarantees regarding:
- Service uptime or availability
- Data persistence or backup
- Performance or latency
- Continuity of the service
The service may be modified, suspended, or discontinued at any time without notice. There is no Service Level Agreement (SLA) during the Beta period.
13. Limitation of Liability
To the maximum extent permitted by law, URLYUP and its operators shall not be liable for any:
- Indirect, incidental, special, consequential, or punitive damages
- Loss of data, profits, revenue, or business opportunities
- Service interruptions, delays, or failures
- Unauthorized access to or alteration of your transmissions or data
- Actions or content of third parties using the service
Your use of URLYUP is at your sole risk. Our total liability for any claims shall not exceed the amount you paid for the service (if any) in the 12 months preceding the claim.
14. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.
15. Contact Us
Data Protection: URLYUP is committed to protecting your privacy. We select infrastructure partners that meet strict European data protection standards and maintain appropriate technical and organizational measures to safeguard your data.