Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and a hashed version of your password. When you create shortened links, we store the destination URL, custom slug (if provided), and associated metadata.

When someone clicks a shortened link, we collect anonymized analytics data including: country (from IP geolocation — the IP itself is not stored), device type, browser family, referrer URL, and UTM parameters. We do not use cookies for click tracking.

2. How We Use Your Data

We use collected data to:

• Provide and maintain the Linken service
• Display click analytics on your dashboard
• Detect and prevent abuse (malicious URLs, spam)
• Send transactional emails (account verification, password resets, billing receipts)
• Improve the service based on aggregate, anonymized usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

Linken uses the following third-party services:

• Cloudflare — hosting, CDN, and edge computing (data processing agreement in place)
• Stripe — payment processing (PCI DSS Level 1 certified, we never see your full card number)
• Resend — transactional email delivery
• Google Web Risk API — URL safety scanning to protect users from malicious links

4. Data Storage & Security

Your data is stored on Cloudflare's global network. Passwords are hashed using bcrypt and never stored in plaintext. API keys are stored as SHA-256 hashes. All traffic is encrypted via HTTPS. Session cookies are HttpOnly, Secure, and SameSite=Lax.

5. Your Rights (GDPR)

You have the right to:

• Access — request a copy of all data associated with your account
• Rectification — correct inaccurate personal data
• Erasure — request deletion of your account and associated data
• Portability — export your data in a machine-readable format

To exercise any of these rights, contact us at [email protected].

6. Cookies

Linken uses only essential cookies required for authentication (session cookies). We do not use tracking cookies, advertising cookies, or third-party analytics scripts. We self-host our fonts — no requests are made to Google Fonts or other font CDNs.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related inquiries, contact us at [email protected].