YSN.LOL grants you a personal, non-exclusive, non-transferable license to access and use the platform to create, manage, and share your bio-link page. You may not:

• Reverse-engineer, decompile, or extract source code from YSN.LOL
• Scrape, crawl, or automate requests against the platform without written permission
• Impersonate YSN.LOL or create misleading pages that imply official affiliation
• Remove copyright or attribution notices from any part of the service
• Resell, sublicense, or redistribute access to the platform

The materials on YSN.LOL are provided on an 'as is' basis. YSN.LOL makes no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, or uninterrupted availability.

You retain rights to content you submit, post, or display on YSN.LOL. By submitting content, you grant YSN.LOL a worldwide, non-exclusive, royalty-free license to host, display, cache, and distribute that content solely to operate and improve the service.

This license ends when you delete the content or your account, except for anonymized analytics data and backup retention of up to 30 days.

You must comply with YSN Content Policies (https://docs.ysn.lol/policies-and-security/content-policies), which form part of these Terms. YSN may remove content that violates these policies and restrict, suspend, or terminate responsible accounts.

You are solely responsible for your content. You agree not to post content that is:

• Illegal, fraudulent, or impersonating others
• Infringing on third-party intellectual property rights
• Spam, phishing, or automated abuse
• Sexually exploitative content, sexual content involving minors, credible threats or encouragement of serious violence, severe targeted harassment, privacy violations that could expose another person to harm, or other content prohibited by applicable law

YSN.LOL provides analytics and discovery features. By using them, you acknowledge:

• Automatically generated insights may not always be real-time and should be used as guidance, not a guarantee
• Exploiting, manipulating, or abusing analytics or automation features is strictly prohibited
• The service may prioritize cached results to improve performance and reliability

Premium features are available through a secure one-time lifetime payment. Sales are generally final, but refund requests may be reviewed case by case depending on account usage and circumstances.

This is a one-time lifetime payment with no subscription and no renewals.

Free Premium access granted by YSN.LOL through promotions, campaigns, or manual grants is discretionary and may be removed at any time.

If an account with free granted Premium remains inactive for an extended period, we may remove that Premium status.

Custom domain support is a Premium feature. When you connect a custom domain:

• You are responsible for configuring DNS records correctly
• YSN.LOL provisions and manages TLS certificates automatically
• YSN.LOL may remove custom domain access if the account violates these Terms or becomes inactive
• We do not guarantee DNS propagation times or uptime SLAs beyond our standard service

Each person may create only one account. Accounts are for individual use only; do not share credentials or sell access.

Attempts to create multiple accounts for the same individual may result in removal or consolidation of extra accounts without notice.

If we detect suspicious patterns such as coordinated abuse, reseller behavior, or evasion of prior enforcement, we may act on all related accounts and payment methods.

We reserve the right to terminate or suspend your account at any time, without prior notice, for harmful conduct, illegal activity, or violation of these terms.

To the maximum extent permitted by law, YSN.LOL and its affiliates are not liable for indirect, incidental, or special damages. By using the service, you agree to the following:

• Informal Resolution: contact support@ysn.lol and allow a 30-day good-faith resolution window before formal action
• Arbitration: disputes are resolved through individual binding arbitration with no class action and no jury trial
• Governing Law: these Terms and disputes are governed by the laws of Texas, United States, without regard to conflict-of-law rules

YSN.LOL is independently operated by David and Omar from Texas, United States. For privacy, legal, or data-protection requests, contact support@ysn.lol.

YSN.LOL is developed in Texas, United States. Our primary application and self-hosted Supabase Storage infrastructure are located in the United States. Cloudflare may process and deliver data through its global network, including when providing Cloudflare R2 media and object storage.

We use your information to operate and maintain the website, improve personalization through analytics, and develop new features based on usage patterns.

We do not sell your personal data to third parties.

IP addresses are used only for view deduplication and account security. They are not used for advertising, profiling, or cross-site tracking.

Sensitive metadata such as IPs and email addresses is stored encrypted using AES-256-GCM.

For Image Host uploads, privacy controls are optional. Users can choose encrypted storage, expiry timers, view limits, download limits, and automatic deletion rules.

We use a 7-day token cookie to keep you signed in. It contains a signed session token and is HttpOnly, secured in production, and not readable by client-side JavaScript.

We use a 30-day encrypted _ysn_pref cookie to remember certain settings and support security, abuse prevention, and analytics deduplication. It is HttpOnly and may contain device and visit-related data needed for those purposes.

• Account and profile data: until account deletion
• Profile view and click analytics events: up to 30 days
• Traffic-security metrics used for DDoS and traffic analysis: up to 90 days
• Administrative activity logs: up to 90 days
• Aggregated or anonymized analytics: up to 12 months
• Image Host files: until deleted by the user, removed by a configured deletion rule, or removed for policy/security reasons
• Deleted Image Host files: removed from active hosted storage and no longer available through their hosted link
• Backups: up to 30 days after deletion
• Payment records: as required by Lemon Squeezy or legal obligations

We use carefully selected providers and integrations to deliver the service. Depending on the features you use, these providers may receive the data needed to provide their service.

For applicable music and lyrics features, we use official embeds and licensed APIs, including Evi. We may process the music links, search terms, and metadata you provide to deliver these features.

Discord and Spotify provide their own OAuth and embed services and process data under their respective privacy terms when you use those features. Evi provides the contracted music and lyrics API service used for applicable features.

• Cloudflare for DDoS protection, CDN, DNS, and Cloudflare R2 media/object storage; Cloudflare may process and deliver data through its global network
• Our self-hosted Supabase Storage infrastructure in the United States for Image Host storage
• Lemon Squeezy for payment processing
• Discord, an independent provider, for OAuth sign-in and community features
• Spotify, an independent provider, for official embed metadata when you use Spotify content
• Evi, our contracted provider, for applicable licensed music and lyrics API features

All traffic is protected in transit with TLS and HTTPS enforcement. Sensitive metadata is encrypted at rest, and passwords are protected with bcrypt hashing.

We offer optional authenticator-app two-factor authentication (2FA) and recovery codes to help protect accounts.

Optional Image Host encrypted storage uses AES-256-GCM. Each encrypted hosted file uses a separate file key, and that file key is stored encrypted. TLS certificates for connected custom domains are provisioned and renewed automatically.

You must be at least 13 years old, or the minimum age required to use online services in your country, whichever is higher. We do not knowingly collect personal information from people below that age.

If we learn that we have collected personal information from someone below the applicable minimum age, we will take steps to delete the account and associated personal information.

If we become aware of a security incident likely to create a material risk to personal information, we will investigate and take reasonable steps to contain it.

We will provide public notice and, where we can identify and contact affected users, direct notice. We will also make notifications to authorities when legally required.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, YSN.LOL is the data controller for the personal data described in this policy. You can contact us at support@ysn.lol. We process your data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract: account, profile, and Image Host data, to provide the service you signed up for
• Legitimate interest: encrypted IP and usage data, for account security, abuse prevention, and view deduplication
• Consent: optional marketing communications, where applicable, which you may withdraw at any time
• Legal obligation: payment records retained as required by law or our payment processor

We maintain a strict three-strikes policy. Users who repeatedly infringe the rights of others or fail to resolve valid claims may face permanent account termination.

• We may share claim details with the accused party when necessary
• Filing a false DMCA report may create legal liability for damages
• For general help, contact support@ysn.lol