Linklify

Privacy Policy

Last updated: August 5, 2026

1. Introduction

Linklify ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, password (encrypted), display name (optional), Amazon Associates affiliate tag
  • Profile Information: Username, bio (up to 500 characters), avatar URL, social media links (Facebook, Instagram, X, TikTok, Snapchat, LinkedIn, YouTube, Pinterest, Reddit, Threads)
  • Link Information: URLs you submit (generic and Amazon), custom slugs, link metadata, tags
  • Store Content: Products, services, digital downloads, and associated images and descriptions you publish
  • Preferences: Selected profile template, theme settings

2.2 Automatically Collected Information

  • Click Data: When someone clicks your shortened links, we collect:
    • IP address (hashed for privacy)
    • Country (derived from IP)
    • Device type (desktop, mobile, tablet)
    • Browser type
    • Timestamp
    • Referrer URL
  • Profile Page Views: When someone visits your public profile page
  • Usage Data: How you interact with the Service, features used, error logs
  • Behavioural Analytics: On Linklify-owned pages (e.g. homepage, pricing, blog), Microsoft Clarity records session replays, heatmaps, mouse movements, clicks, and scroll depth to help us improve the Service. This data is not collected on user profile pages (linklify.link/@username).
  • Cookies: Authentication tokens, session management, preferences

2.3 Third-Party Data

  • Amazon Product Data: We fetch product titles and images from Amazon for preview cards

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Create and manage your account
  • Render and display your public profile page
  • Show your opted-in links, products, services, and downloads on your profile page
  • Process and redirect your shortened links
  • Record per-link click counts and generate full analytics covering country, device, browser, OS, and daily trends
  • Display product preview cards for Amazon links
  • Process subscription payments through Creem. We do not process payments for products or services listed in your store
  • Send service-related notifications
  • Detect and prevent abuse, fraud, or policy violations
  • Improve and optimize the Service
  • Comply with legal obligations

3A. Connected Social Accounts

You may optionally connect an Instagram, YouTube or TikTok account so that your public page can display current statistics without you editing them by hand. Connecting is always initiated by you and is never required to use Linklify.

What we collect

  • Instagram: username, follower and post counts, engagement statistics and thumbnails of your recent public posts
  • YouTube: channel name, subscriber count, total views, video count and details of your recent public videos
  • TikTok: display name, avatar, follower count, total likes and video count

Where a platform requires you to authorize access (currently TikTok, and optionally Instagram), we store the resulting access and refresh tokens encrypted at rest using AES-256-GCM. Tokens are never shown in our interface, never included in any public response, and never shared with anyone.

How we use it

  • To display the statistics you choose to show on your own public Linklify page
  • To refresh those statistics automatically, normally once per day

Access is read-only. We never post, comment, message, or modify anything on your behalf on any connected platform. We do not sell this data, use it for advertising, or share it with third parties.

Your control

You can disconnect any account at any time from your dashboard. Disconnecting deletes the stored tokens and all synced statistics from our systems immediately, and where the platform supports it we also revoke our authorization with the platform itself. You may additionally revoke access from within Instagram, YouTube or TikTok's own settings, which stops all future syncing.

Statistics you choose to display are shown on your public page and are therefore visible to anyone with the link, in the same way as the rest of your profile.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your data includes:

  • Contract: Processing necessary to provide the Service you requested
  • Legitimate Interest: Improving the Service, preventing fraud, ensuring security
  • Consent: When you explicitly consent to specific processing activities
  • Legal Obligation: When required by law

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

5.1 Public Profile

Your display name, username, bio, avatar, social links, any links you opt in to display, and any products, services, or downloads you add to your store are publicly visible at linklify.link/@username. This information is accessible to anyone on the internet and may be indexed by search engines.

5.2 Third-Party Service Providers

  • Hosting providers: To store and serve data
  • Payment processor (Creem): To process subscription payments. Creem collects billing information directly; we do not store your payment card details
  • Microsoft Clarity: We use Microsoft Clarity for behavioural analytics (session replays, heatmaps) on Linklify-owned pages. Clarity may collect and store interaction data on Microsoft's infrastructure. See Microsoft's Privacy Statement for details.
  • Email services: To send notifications

5.3 Amazon

  • When users click your links, they are redirected to Amazon with your affiliate tag
  • Amazon may collect data according to their own privacy policy

5.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.

6. Data Retention

  • Account Data: Retained while your account is active
  • Click Data: Retained for 24 months
  • Links: Retained while your account is active
  • Deleted Accounts: Data deleted within 30 days of account deletion

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request your data in a structured, machine-readable format
  • Objection: Object to certain processing activities
  • Restriction: Request restriction of processing
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

8. Data Security

We implement security measures to protect your data, including:

  • Encryption of passwords using argon2id
  • HTTPS/TLS for data transmission
  • Hashing of IP addresses for privacy
  • SHA-256 hashing of refresh tokens
  • Access controls and authentication
  • Regular security updates

However, no method of transmission or storage is 100% secure. Use the Service at your own risk.

9. Cookies and Tracking

We use cookies and local storage for:

  • Authentication: Access and refresh tokens stored in httpOnly cookies
  • Preferences: Theme settings (dark/light mode)
  • Payment: Creem may set cookies during the checkout and billing process
  • Analytics (Microsoft Clarity): Clarity sets cookies to identify returning sessions and associate behavioural data. These cookies are only set on Linklify-owned pages, not on user profile pages. You can opt out via Microsoft's opt-out page.

You can disable cookies in your browser, but this may affect Service functionality.

10. Third-Party Links

The Service contains links to Amazon and potentially other third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of sale of personal information (we do not sell data)
  • Right to deletion
  • Right to non-discrimination for exercising CCPA rights

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through the Service. The "Last updated" date at the top indicates when changes were made.

15. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us at [email protected].

16. Data Protection Officer

For GDPR-related inquiries, you may contact our data protection representative at [email protected].