Privacy Policy
The short version: we collect what we need to run your account and your pages, and no more. We never store your visitors' IP addresses, we never see your card details, we don't sell data, and your photos in Image Spoofer never leave your device.
1. Who we are
This policy explains how Linkity ("we", "us") handles personal data when you use linkity.co, a page hosted on Linkity (including on a creator's own domain), or our support channels. Linkity decides how and why this data is used. Contact us about anything in this policy at [email protected].
2. If you have a Linkity account
| What | Why |
|---|---|
| Name, email address, password (stored scrambled, never readable), two-factor settings | To run your account, sign you in and keep it secure |
| Your pages, links, designs, photos and settings | To host and show your pages |
| Plan, trial and subscription status, and a Stripe customer reference | To bill you. Card details go straight to Stripe; we never see or store them. |
| Who referred you, and the people you refer and the people they refer (shown to you with their email partly hidden) | To give out referral discounts and work out commission |
| The PayPal or Wise email, or wallet address, you give us for a referral payout | To send you your commission |
| A record of important account changes (for example plan changes, security changes, admin actions) | Security, preventing abuse and resolving disputes |
| Messages you send us, including on Telegram | To help you |
3. If you visit a page hosted on Linkity
We count visits and clicks so creators can see how their page is doing, and we protect pages from automated crawlers. We do not store IP addresses. For each real visit or click we record:
- a visitor code made by scrambling the connection details together with the date. It changes every day, can't be turned back into an IP address, and can't be used to follow the same person from one day to the next;
- rough location (country, region and city) supplied by our network provider, Cloudflare;
- device type, operating system and browser;
- where the visit came from (for example the app it was opened in, or the referring website), and which link was clicked.
Creators see these figures in their statistics, including a short list of recent visits showing the details above. They never see an IP address or anything that names you.
When an automated crawler or bot is detected, we log its browser identifier and rough location so we can recognise it again. On some links, Cloudflare Turnstile checks that a real person is clicking; Cloudflare handles that check under its own privacy policy.
4. Cookies and browser storage
We use only what the service needs to work. We don't use advertising or tracking cookies.
| What | Why |
|---|---|
| Session and security cookies | Keep you signed in and protect forms from forgery |
| "Remember me" cookie (only if you tick it) | Keep you signed in between visits |
| Referral cookie (only if you arrive through a referral link) | Remember for 60 days which account referred you, so the right person gets the reward and you get your discount |
| Short-lived browser storage on creator pages | Remember, for the current visit only, that you dismissed a notice or confirmed a prompt, and where you arrived from |
| Browser storage in your dashboard | Remember that you dismissed a notice |
5. Tools
- Image Spoofer works entirely in your browser. Your photos are never uploaded to us.
- AI page designer: the description you type is sent to our AI provider, Anthropic, to generate a design. Nothing else about you is sent with it.
- Spike alerts use your page statistics to email you when a link performs far above normal. You can turn the emails off in Settings.
- Meta Services: if you ask us for help with an Instagram, Facebook or Threads account, we use the details you send us, including any login details, only to do that job. We delete login details when the job is finished.
6. The legal basis for using your data
- Our contract with you: running your account, hosting your pages, billing and support.
- Legitimate interests: privacy-friendly visit statistics for creators, protecting pages from crawlers and abuse, and keeping the service secure. We've designed these to use as little data as possible.
- Legal obligations: keeping billing records and responding to lawful requests.
- Your consent: optional emails such as spike alerts, which you can turn off at any time.
7. Who we share data with
We don't sell personal data and we don't share it for advertising. We use these providers to run Linkity, and they process data only on our instructions or under their own privacy terms where they act independently:
| Provider | What for |
|---|---|
| Stripe | Payments, subscriptions and invoices |
| Cloudflare | Delivering pages quickly and securely, custom domains, rough visitor location and human checks |
| Spaceship | Hosting the service and sending email |
| Anthropic | The AI page designer |
| Telegram | Support conversations you start with us |
We may also share data if the law requires it, to protect people's safety, or to deal with abuse of the service. Some of these providers are based outside the European Economic Area. Where data is transferred, it is protected by the safeguards the law requires, such as the European Commission's standard contractual clauses.
8. How long we keep data
- Detailed visit and click records: 90 days. After that only daily totals are kept.
- Records of detected bots and crawlers: 30 days.
- Account data: while your account exists. If your subscription ends, your account and pages are kept so you can come back; usernames are released after six months. Ask us and we'll delete your account and its data.
- Deleted pages: recoverable for 30 days, then permanently removed.
- Billing records: as long as tax and accounting law requires.
- Backups: overwritten on a rolling basis, within 14 days.
9. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. You can withdraw consent at any time for anything based on consent. Email [email protected] and we'll reply within one month. You also have the right to complain to your local data protection authority.
If you visited a creator's page and want your visit data removed, contact us. Because we don't store IP addresses or names, tell us roughly when you visited and from which device so we can find it.
10. Security
Connections are encrypted, passwords are stored scrambled, two-factor sign-in is available, and access to account data is limited to the people who need it. No system is perfectly secure, but we take care to protect your data and will tell you promptly if a breach affects you.
11. Children
Linkity is not for anyone under eighteen, and we don't knowingly collect their data. If you believe someone under eighteen has an account, contact us and we'll close it.
12. Changes
If we change this policy in a way that matters, we'll update the date at the top and email account holders before the change takes effect.