Privacy Policy — Linklify

1. Introduction

Linklify ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, password (encrypted), display name (optional), Amazon Associates affiliate tag
Profile Information: Username, bio (up to 500 characters), avatar URL, social media links (Facebook, Instagram, X, TikTok, Snapchat, LinkedIn, YouTube, Pinterest, Reddit, Threads)
Link Information: URLs you submit (generic and Amazon), custom slugs, link metadata, tags
Store Content: Products, services, digital downloads, and associated images and descriptions you publish
Preferences: Selected profile template, theme settings

2.2 Automatically Collected Information

Click Data: When someone clicks your shortened links, we collect:
- IP address (hashed for privacy)
- Country (derived from IP)
- Device type (desktop, mobile, tablet)
- Browser type
- Timestamp
- Referrer URL
Profile Page Views: When someone visits your public profile page
Usage Data: How you interact with the Service, features used, error logs
Cookies: Authentication tokens, session management, preferences

2.3 Third-Party Data

Amazon Product Data: We fetch product titles and images from Amazon for preview cards

3. How We Use Your Information

We use your information to:

Provide and maintain the Service
Create and manage your account
Render and display your public profile page
Show your opted-in links, products, services, and downloads on your profile page
Process and redirect your shortened links
Record per-link click counts (all plans) and generate full analytics — country, device, browser, OS, and daily trends (Pro plan)
Display product preview cards for Amazon links
Process Pro subscription payments through Paddle Billing — we do not process payments for products or services listed in your store
Send service-related notifications
Detect and prevent abuse, fraud, or policy violations
Improve and optimize the Service
Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your data includes:

Contract: Processing necessary to provide the Service you requested
Legitimate Interest: Improving the Service, preventing fraud, ensuring security
Consent: When you explicitly consent to specific processing activities
Legal Obligation: When required by law

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

5.1 Public Profile

Your display name, username, bio, avatar, social links, any links you opt in to display, and any products, services, or downloads you add to your store are publicly visible at linklify.link/@username. This information is accessible to anyone on the internet and may be indexed by search engines.

5.2 Third-Party Service Providers

Hosting providers: To store and serve data
Payment processor (Paddle): To process subscription payments — Paddle collects billing information directly; we do not store your payment card details
Analytics tools: To understand usage patterns
Email services: To send notifications

5.3 Amazon

When users click your links, they are redirected to Amazon with your affiliate tag
Amazon may collect data according to their own privacy policy

5.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.

6. Data Retention

Account Data: Retained while your account is active
Click Data: Retained for 24 months (Pro plan analytics)
Links: Retained while your account is active
Deleted Accounts: Data deleted within 30 days of account deletion

7. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Request your data in a structured, machine-readable format
Objection: Object to certain processing activities
Restriction: Request restriction of processing
Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

8. Data Security

We implement security measures to protect your data, including:

Encryption of passwords using argon2id
HTTPS/TLS for data transmission
Hashing of IP addresses for privacy
SHA-256 hashing of refresh tokens
Access controls and authentication
Regular security updates

However, no method of transmission or storage is 100% secure. Use the Service at your own risk.

9. Cookies and Tracking

We use cookies and local storage for:

Authentication: Access and refresh tokens stored in httpOnly cookies
Preferences: Theme settings (dark/light mode)
Payment: Paddle may set cookies during the checkout and billing process

You can disable cookies in your browser, but this may affect Service functionality.

10. Third-Party Links

The Service contains links to Amazon and potentially other third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of sale of personal information (we do not sell data)
Right to deletion
Right to non-discrimination for exercising CCPA rights

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through the Service. The "Last updated" date at the top indicates when changes were made.

15. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us at [email protected].

16. Data Protection Officer

For GDPR-related inquiries, you may contact our data protection representative at [email protected].