What we collect

• Account data: your email address if you sign in with a real account, plus OAuth profile info (name, avatar) if you use Google sign-in. Anonymous sessions store no email, just a session identifier and a hashed recovery code.
• Content you create: redirect links, bio pages, and their settings.
• Visit analytics: for links and bio pages you own, we record view events: approximate location (country/city, derived from your visitors' IP address at the network level, not stored as a precise address), device/browser/OS, referrer, and UTM campaign parameters. This powers the Pro analytics dashboard and per-item view counts.
• Technical data: IP address and user-agent string, kept briefly for abuse prevention (bot filtering, rate limiting) and included in visit analytics as described above.
• Payment data: if you subscribe to Pro, Polar handles billing entirely (see below). We never see or store your card details.

Cookies

We use a session cookie to keep you signed in, and a separate, short-lived cookie per piece of content you visit so we don't count the same visit twice in analytics (it expires at midnight and stores no personal data, just a flag). We don't use third-party advertising or cross-site tracking cookies.

Who we share data with

We rely on the following third-party services to run linksh.re. Each only receives the data it needs to do its job:

• Cloudflare: hosting, content delivery, bot/abuse protection (Turnstile), and file storage for bio images.
• Neon: our Postgres database provider, storing account and content data.
• Resend: sends magic-link sign-in emails.
• Google: powers "Sign in with Google", if you choose to use it.
• Polar: processes Pro subscription payments and billing as our merchant of record.
• Google Safe Browsing: checks link destinations against known-malicious URL lists before they go live.

We don't sell your data, and we don't share it with anyone beyond what's needed to run the Service.

How long we keep it

We keep account and content data as long as your account is active. We keep visit-analytics rows to power the analytics dashboard, and don't currently delete them on a fixed schedule. Delete your account or specific content, and we remove the associated data. You can also request deletion directly.

Your rights

You can access, correct, or delete your account and its content anytime from the dashboard. To request a copy of your data or full account deletion, email support@linksh.re.

Children

The Service isn't directed at children under 13, and we don't knowingly collect data from them.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page. Continuing to use the Service after a change means you accept the update.

Contact

Questions about this policy or your data: support@linksh.re.