Effective Date: 15 February 2026
Last Updated: 15 February 2026

This Privacy Policy explains how uppl.ee (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you use uppl.ee (the “Service”). It also describes your privacy rights and choices.

If you do not agree with this Privacy Policy, please do not use the Service.

1) Who We Are (Controller)

For purposes of the EU/UK GDPR and similar laws, uppl.ee is the data controller for personal data processed in connection with the Service, unless otherwise stated.

• Contact: contact[at]uppl.ee

2) Information We Collect

2.1 Information you provide

• Account information: such as username, email address, and account preferences.
• Payment information: if you purchase a paid plan, payment details are typically collected and processed by our payment provider (we may receive limited details like billing status, plan type, and transaction identifiers).
• Support communications: information you send us when contacting support (including email content and attachments you choose to provide).

2.2 Information you upload or generate when using the Service

• User Content: images and any metadata you add (e.g., titles, descriptions, tags, visibility settings).
• Sharing information: information related to links you create and how you configure sharing (private/unlisted/public).

2.3 Information collected automatically

• Usage data: pages viewed, features used, approximate activity times, and interactions with the Service.
• Device and connection data: IP address, browser type, device identifiers, operating system, and similar technical data.
• Log and security data: diagnostic logs and security events used to prevent fraud and abuse.
• Cookies and similar technologies: used for authentication, security, and site functionality. See Section 8.

3) How We Use Information

We use information for the following purposes:

• Provide and operate the Service: create accounts, host and deliver images, enable sharing, and maintain functionality.
• Process subscriptions and billing: manage paid plans, invoices/receipts, and account status.
• Security and abuse prevention: detect fraud, prevent unauthorized access, enforce our Terms, and protect users.
• Customer support: respond to requests and troubleshoot issues.
• Improve the Service: analyze usage to improve performance, reliability, and features.
• Legal compliance: comply with applicable laws, regulations, and lawful requests.

4) Legal Bases (GDPR/UK GDPR)

If you are located in the EEA/UK/Switzerland, we process personal data under these legal bases (as applicable):

• Contract: to provide the Service and fulfill our obligations to you (GDPR Art. 6(1)(b)).
• Legitimate interests: to secure, maintain, and improve the Service; prevent abuse; and operate our business (Art. 6(1)(f)).
• Legal obligations: to comply with laws (e.g., tax, accounting, and lawful requests) (Art. 6(1)(c)).
• Consent: where required for certain cookies or optional features (Art. 6(1)(a)). You may withdraw consent at any time where applicable.

5) How We Share Information

We may share information in the following situations:

• Service providers (processors): vendors that help us operate the Service (e.g., hosting/storage, content delivery, analytics, email delivery, payment processing, customer support tools). They may access information only to perform services for us and must protect it.
• Payment providers: to process transactions and prevent fraud (we typically do not store your full payment card details).
• Legal and safety: to comply with law, enforce our Terms, protect rights and safety, and respond to lawful requests.
• Business transfers: if we are involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction.
• With your direction: when you choose to share images publicly or provide access via a link (unlisted/public), others may view, download, or re-share the content.

6) Public, Unlisted, and Private Content

• Public: may be accessible to anyone and may be indexed by search engines or shared widely.
• Unlisted: accessible to anyone with the link; it may not be listed publicly, but it can still be forwarded and shared by others.
• Private: intended to be accessible only to you through your account. Please note that no method of transmission or storage is 100% secure.

7) Data Retention

We retain personal data only for as long as necessary to provide the Service and for legitimate and legal purposes such as security, dispute resolution, and compliance. Retention periods may vary depending on the data type and purpose.

If you delete content or your account, we will delete or de-identify information as described in our Terms and subject to technical limitations, including backup retention for a limited period.

8) Cookies and Similar Technologies

We use cookies and similar technologies for authentication, security, and basic functionality, and may use them for analytics where permitted. You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

• Essential cookies: used to keep you signed in and protect your account.
• Security cookies: used to prevent fraud and abuse.
• Analytics cookies (optional where required): used to understand usage and improve the Service.

9) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data. However, no security measures can guarantee absolute security. You are responsible for keeping your login credentials confidential.

10) International Data Transfers

We are based in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. and other countries where we or our service providers operate.

For EEA/UK users, where required we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and additional measures described in this policy and/or our agreements with service providers.

11) Your Rights and Choices

11.1 Account controls

• Update account information through your account settings (if available).
• Choose visibility settings (private/unlisted/public) for your images.
• Delete images and/or request account deletion.

11.2 GDPR/UK GDPR rights (EEA/UK/Switzerland)

Subject to certain exceptions, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to processing based on legitimate interests
• Request data portability
• Withdraw consent (where processing is based on consent)

To exercise these rights, contact contact[at]uppl.ee. We may need to verify your identity.

11.3 U.S. privacy rights

Depending on your state of residence, you may have additional rights. You can contact contact[at]uppl.ee with requests, and we will respond as required by applicable law.

12) Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us at contact[at]uppl.ee.

13) Third-Party Services and Links

The Service may contain links to third-party sites or services. We are not responsible for their privacy practices. We recommend reviewing the privacy policies of those third parties.

14) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by posting an updated policy on uppl.ee and updating the dates above. Your continued use of the Service after the update takes effect means you accept the updated Privacy Policy.

15) Contact Us

• Email: contact[at]uppl.ee