Privacy Policy

Account information

When you sign up we collect your email address and a hashed password (managed by Supabase Auth). We do not store plaintext passwords.

Links you create

We store the destination URLs, slugs, titles, and optional deep-link targets you enter. This content belongs to you.

Click data

Each time one of your short links is visited we record the timestamp, User-Agent header, Referer header, and a one-way daily-salted hash of the visitor's IP address. We never store raw IP addresses.

Usage and log data

Our hosting provider may log standard server access data (request path, response code, timestamp) for operational purposes.

• To operate and improve the Service.
• To provide you with analytics about your links.
• To send transactional emails (password reset, billing receipts).
• To detect and prevent abuse or fraud.
• To comply with legal obligations.

We do not sell your data or use it for advertising.

We use a session cookie issued by Supabase Auth to keep you logged in. We do not use third-party tracking cookies or advertising pixels.

We share data only with:

• Supabase — our database and auth provider, acting as a data processor on our behalf.
• Our hosting provider — for serving the application.
• Law enforcement — when required by a valid legal process.

No other third parties receive your personal data.

We retain your account data and links for as long as your account is active. Click data is retained for 24 months and then deleted. You may delete your account at any time, which permanently removes your links and click history.

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. IP addresses are never stored — only a daily-rotating hash used solely for unique-visitor counting. We apply row-level security in our database so each user can only access their own data.

Depending on your location you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability.

To exercise any of these rights, email us at support@linksnap.live. We will respond within 30 days.

The Service is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have done so inadvertently, please contact us and we will delete the information promptly.

We may update this policy from time to time. We will notify you by email or a dashboard notice at least 14 days before material changes take effect. The "last updated" date at the top of this page reflects the latest revision.

Questions or concerns? Email us at support@linksnap.live.