Privacy Policy

linkz.lol is a URL shortening service that also provides QR code generation, link analytics, and link-in-bio pages. We are operated by the linkz.lol team. If you have any questions, email us at [email protected].

Account information: When you register, we collect your name, email address, and a hashed (not plain-text) password. We never store your password in readable form.

Link and bio analytics: When someone visits a short link, we log the timestamp, IP address, approximate location, browser, device type, and referrer URL. For bio pages, we store a one-way visitor identifier derived from request data, source, device type, and referrer; we do not store the visitor's raw IP address with the bio-view event. This data powers analytics for the account owner.

Audience information: If a visitor joins a bio-page email list, we store their email address, consent status, signup source, and confirmation or unsubscribe dates. The bio-page owner can view and export confirmed subscribers.

Integration data: Account owners may configure webhook destinations. We store the endpoint, signing secret, selected events, and recent delivery results.

Payment information: Payments are processed by Stripe. We never see or store your card details — Stripe handles all payment data under their own privacy policy.

Usage data: We may log basic server activity (errors, request timing) for operational purposes.

• To provide the service — creating and redirecting short links, showing analytics, checking destination health, generating QR codes, hosting bio pages, collecting opt-in subscribers, and delivering signed webhooks.
• To send service emails, including account verification, password resets, upgrade confirmations, audience confirmation and welcome messages, creator subscriber notifications, link-expiry notices, optional onboarding tips, and optional weekly performance summaries.
• To enforce our Terms of Service and prevent abuse.

Onboarding tips and weekly summaries can be turned off from account settings or through the unsubscribe link in either email. Essential security, verification, billing, and account-service messages continue when those optional emails are disabled.

We do not sell, rent, or share your personal data with third parties for advertising purposes.

We use a small number of trusted third-party services to operate linkz.lol:

• Stripe — payment processing. Stripe Privacy Policy
• Amazon SES — transactional email delivery. AWS Privacy Notice
• Umami (optional) — privacy-friendly site analytics. No cookies, no cross-site tracking.

We use a single session cookie to keep you signed in. It is HTTP-only, cannot be read by JavaScript, and contains an encrypted session token — not your personal data. We do not use tracking cookies or advertising cookies.

Your account data, links, bio analytics, subscriber list, and webhook configuration are kept while your account exists. Click and view analytics are retained to provide historical reports. Subscribers can unsubscribe through the link in their confirmation or welcome email. If you delete your account, its associated data is deleted within 30 days.

You have the right to access, correct, export, or delete your personal data. To exercise these rights, email [email protected] and we will respond within 7 days.

If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

linkz.lol is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

We may update this policy from time to time. If we make material changes, we will notify registered users by email. The "Last updated" date at the top of this page always reflects the current version.

Questions or concerns? Email us at [email protected]. We aim to respond within 24 hours.