Privacy Policy

1. Who Is Responsible

Linkr is operated by Mark Rabey, an individual based in Ontario, Canada. If you have questions about how your data is handled, contact me at mark@linkr.ing.

2. Information I Collect

Account data

When you sign up, your email address and a unique user identifier are stored. Authentication is handled by Clerk; I do not store passwords.

Link data

Short links you create, including destination URLs, slugs, notes, and tags, are stored and associated with your account.

Click analytics

When someone clicks one of your short links, I record:

• A one-way hash of the visitor's IP address (SHA-256 with a server-side salt) -- the raw IP is never stored;
• The HTTP Referer header (if present);
• The User-Agent string;
• Approximate country, derived from the IP address at the time of the click.

Billing data

Payment processing is handled by Stripe. I store only your Stripe customer ID, subscription status, and plan. Card details are never transmitted to or stored on my servers.

3. How I Use Your Information

• To provide and operate the Service;
• To display click analytics on your dashboard;
• To process payments and manage your subscription;
• To send transactional emails (e.g., billing notifications);
• To detect and prevent abuse or violations of the Terms of Service.

I do not sell your data or use it for advertising.

4. Data Retention

Click data is retained based on your plan: 30 days for free accounts, one year for Pro accounts. Account and link data is retained while your account is active and deleted within 30 days of a deletion request.

5. Third-Party Services

The Service uses the following sub-processors:

• Clerk -- identity and authentication;
• Neon -- database hosting (data stored in AWS us-east-1);
• Vercel -- application hosting and edge infrastructure;
• Stripe -- payment processing.

Each of these services has its own privacy policy. I have no control over their data practices beyond what is governed by our agreements with them.

6. Cookies and Tracking

The Service uses cookies set by Clerk to maintain your authenticated session. No third-party advertising or tracking cookies are used. Click analytics are server-side only -- no tracking scripts are injected into redirect pages.

7. Your Rights

Under Canadian privacy law (PIPEDA) you have the right to access, correct, and request deletion of your personal information. To exercise these rights, email mark@linkr.ing. I will respond within 30 days.

You can delete your account at any time from the account settings page. Deletion removes your profile, links, and associated analytics data.

8. Data Security

Data is encrypted in transit (TLS) and at rest. IP addresses are never stored in raw form -- only a salted SHA-256 hash is persisted. Despite these measures, no system is perfectly secure, and I cannot guarantee the absolute security of your data.

9. Children's Privacy

The Service is not directed to children under 13. I do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact me and I will delete it promptly.

10. Changes to This Policy

I may update this Privacy Policy from time to time. Material changes will be communicated by updating the effective date and, where appropriate, by email. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

Privacy questions or requests: mark@linkr.ing