Privacy Policy

    Last updated: October 8, 2026

    Introduction

    Weeny (“we”, “our”, or “us”) is a privacy-focused platform that provides link shortening, page creation, form building, and analytics services (collectively, the “Service”). Weeny is owned and operated by JPCoding, a sole trader registered in the United Kingdom, trading as Weeny.

    We are committed to protecting your privacy and processing your personal data transparently and lawfully in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    By using our Service, you agree to the collection and use of your information as described in this Privacy Policy.

    Data Controller

    JPCoding (Trading as Weeny)
    United Kingdom
    Email: privacy@weeny.app

    JPCoding is the data controller responsible for determining the purposes and means of processing your personal information. You can contact us directly at the email above with any privacy-related questions or requests.

    Information We Collect

    Personal Information

    We may collect and store the following personal data:

    • Name and email address
    • Profile picture (if provided)
    • Account preferences and settings
    • Payment information (processed securely via Stripe; we do not store full card details)

    Privacy-First Usage Data & Analytics

    We automatically collect certain information about activity on the Service. We prioritise privacy for both account holders and people who click short links:

    • Link and form analytics: When someone clicks a short link, scans a QR code, submits a form, views a form, or views a Teeny Page, we derive analytics fields such as country, region, device, browser, and OS from the request, and we may store referrer and related metadata. Visitor IPs for link clicks, QR scans, form submissions, form views, form sessions, and page views are stored as an HMAC-SHA256 hash and cleared after 90 days. Full user agents on form submissions are also deleted after 90 days. Hashed IPs and full user agents are not returned in dashboard analytics API responses to the browser.
    • No cookies on short-link clicks: Clicking a Weeny short link does not set a cookie on the visitor’s device.
    • No sale of click data: We do not sell or rent click or form analytics to advertisers.
    • Data export: You have the right to export your link and form data at any time.

    Cookies and Tracking

    We use cookies and similar technologies to improve functionality and analyze how our Service is used. See our Cookie Policy for details.

    How We Use Your Information

    We use your information to:

    • Provide, operate, and maintain our Service
    • Process payments and manage subscriptions
    • Send service-related communications
    • Analyze and improve Service performance
    • Provide technical and customer support
    • Prevent fraud and ensure platform security
    • Comply with legal and regulatory obligations

    Information Sharing and Disclosure

    We never sell or rent your personal data. We may share limited data with:

    • Service providers: Hosting, analytics, and payment processors (listed in the Sub-processors section below).
    • Legal authorities: If required by law or to protect our rights.
    • Business transfers: In case of a merger, acquisition, or sale.

    Sub-processors

    To provide our Service, we use the following sub-processors to process data on our behalf:

    • DigitalOcean: Managed PostgreSQL database hosting (encrypted at rest by the provider).
    • AWS (Amazon Web Services): Cloud infrastructure, object storage, and related services (UK/EU regions where configured).
    • Vercel: Website hosting and deployment (Global/UK).
    • Stripe: Payment processing and billing (we do not store full card details).
    • PostHog: Privacy-conscious product analytics and feature flagging (subject to cookie consent on our app).
    • DataFast (datafa.st): Lightweight website analytics on weeny.app.

    Data Security

    We use industry-standard technical and organizational measures to protect your personal data, including HTTPS/TLS in transit (via our hosting providers), database access controls, limited employee access, and encryption at rest provided by our database and storage providers. No online service can guarantee complete security, but we take your data protection seriously.

    Your Rights (UK & EU GDPR)

    Under UK GDPR, you have the right to:

    • Access a copy of your personal data
    • Rectify inaccurate or incomplete data
    • Request erasure of your data (“right to be forgotten”)
    • Restrict or object to certain processing
    • Data portability
    • Withdraw consent at any time

    To exercise these rights, contact us at privacy@weeny.app. We will respond within 30 days.

    Additional Disclosures for California Residents (CCPA/CPRA)

    If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These include the right to:

    • Know what personal information is being collected about you.
    • Request the deletion of your personal information.
    • Opt-out of the "sale" or "sharing" of your personal information (note: Weeny does not sell your data).
    • Non-discrimination for exercising your privacy rights.

    Data Retention

    We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal requirements. If you delete your account, your personal data will be deleted or anonymized within 30 days, except for information retained to meet legal or financial obligations.

    Click stats (counts, dates, country, device, referrer) are kept for as long as your account exists. Visitor IPs for link clicks, QR scans, form submissions, form views, form sessions, and page views are stored as an HMAC-SHA256 hash and cleared after 90 days. Form submission user agents are also deleted after 90 days.

    International Data Transfers

    We may process your information using cloud infrastructure outside the UK or EEA. In such cases, we ensure appropriate safeguards are in place (e.g., UK International Data Transfer Agreement or EU Standard Contractual Clauses).

    Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

    Contact Us

    If you have any questions about this Privacy Policy, please contact us:

    We use cookies to enhance your experience.