Privacy Policy
Last updated 1 November 2026
linkks is operated by Shivam Chauhan, an individual based in India ("we", "us"). This policy explains what we collect when you use linkks.io, the dashboard, or a page published through linkks, why we collect it, who we share it with, and how you can delete it. We keep it short and specific because the Service is small and so is what we collect.
1. Two kinds of people
- Account holders: people who create a linkks page. We are the controller of your account data.
- Visitors: people who open a linkks page. We collect a little anonymous analytics for the page owner. If you give your email through a page's signup block, the page owner is the controller of that email and we process it on their behalf.
2. What we collect from account holders
| Data | Where it comes from | Why |
|---|---|---|
| Email address, name, profile picture URL | Google, when you sign in with Google; or what you type at sign-up | To create and identify your account and show your name in the dashboard |
| Password | What you type, if you use email sign-up | Stored only as a one-way hash (scrypt). We can't read it |
| Sign-in sessions: a random session id, your browser's user agent, your IP address, and when it expires | Your browser when you sign in | To keep you signed in and let you see and sign out devices from Settings. Removed when the session expires or you sign out |
| Your page: handle, name, bio, links, blocks, theme, published state | What you build in the editor | To publish and serve your page |
| Custom domains you connect | What you enter on the Domains screen | To verify them with DNS and serve your page on them |
| Billing: your plan, subscription status and dates, and a record of each payment (amount, currency, date, provider's payment id) | Our payment processor, Creem, via webhooks | To know what you're entitled to and show your payment history. We never receive or store card numbers |
| Plan activity log (upgrades, cancellations, failed renewals) | Generated from billing events | To show you what happened to your plan and when |
3. What we collect from visitors to a linkks page
When someone opens a page or taps a link on it, we record one event containing:
- the kind of event (view or tap) and, for taps, which block was tapped and its title at the time;
- the referring website's host name, such as instagram.com, if the browser sends one;
- a two-letter country code, derived by our hosting provider from the connection, never a precise location;
- a device class: mobile, tablet or desktop, derived from the browser's user agent;
- the time.
We do not store visitors' IP addresses in analytics, do not set tracking cookies on published pages, do not fingerprint devices, and do not track visitors across pages or across the web. IP addresses are used briefly in memory to rate-limit abuse and are then discarded.
If you enter your email in a page's signup block, we store the email, the consent text that was shown next to the form, and the time, and make it available to that page's owner only. Contact the page owner to be removed, or email us and we will remove it.
4. Cookies
| Cookie | What it does | How long |
|---|---|---|
linkks_session | Keeps you signed in to the dashboard | Until you sign out or the session expires |
linkks_oauth | Protects the Google sign-in handshake against forgery | A few minutes, during sign-in only |
Both are strictly necessary, first-party cookies on linkks.io, so there is no cookie banner. Published pages set no cookies at all.
5. Who we share data with
We don't sell personal data and don't share it with advertisers. The Service runs on these providers, each of which processes data only to provide its service to us:
| Provider | What they do | Where |
|---|---|---|
| Render | Hosts the API and the website | Singapore |
| Neon | Hosts the database | Singapore |
| Cloudflare | DNS for linkks.io and routing of our support email | Global network |
| Sign in with Google: Google tells us your email, name and picture after you consent | Global | |
| Creem | Payment processing and merchant of record: takes your card details, charges you, handles taxes and receipts | Global |
| Resend | Sends our transactional emails, such as password resets and address confirmations | United States |
We may also disclose data if the law requires it, or to protect the rights and safety of linkks and its users.
6. Where data is stored and international transfers
Your data is stored in Singapore. If you are in the European Economic Area, the United Kingdom or another region with data transfer rules, your data is transferred to Singapore and to the providers above under their standard contractual terms.
7. How long we keep things
- Account data: while your account exists.
- Analytics events: your plan determines how far back you can view them (7, 90 or 365 days). Events older than 365 days may be deleted.
- Sessions: until they expire or you sign out.
- Billing records: for as long as we are required to keep financial records, typically 7 years, even after account deletion.
- Deleted accounts: when you delete your account it is hidden immediately and your page goes offline. After 7 days the account, your page, its analytics, subscribers and domains are permanently removed. During those 7 days you can sign in to restore it.
8. Your rights
Wherever you live, you can:
- See and export your data. Your page content is yours to copy at any time; paid plans include CSV export of your audience and analytics.
- Correct your name in Settings. Email changes aren't supported yet; email us and we'll do it manually.
- Delete your account yourself from Settings, as described above.
- Object or complain. If you are in the EEA or UK you may also complain to your local data protection authority. Please contact us first so we can try to fix it.
Email support@linkks.io for any request. We answer from the same address and will verify it's you before acting on an account request.
9. Security
All traffic uses HTTPS. Passwords are hashed with scrypt. Session cookies are HttpOnly and Secure. Access to production systems is limited to the operator. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay.
10. Children
linkks is not for children under 16. We don't knowingly collect data from them. If you believe a child has an account, email us and we will remove it.
11. Changes
We'll update this policy when the Service changes. The date at the top shows the current version. For material changes we'll email account holders before they take effect.
12. Contact
Shivam Chauhan, operator of linkks, India. support@linkks.io