Privacy Policy

1. What we collect

• Account data: your email address, password hash, verification state and session records.
• Profile data: your username, display name, headline, bio, avatar URL, social links and appearance settings.
• Content: the links and categories you add, including titles, descriptions, destinations and visibility settings.
• Analytics: recorded clicks with the link, UTC day, referrer domain, device class and country code.
• Operational data: security logs needed to run the service and respond to abuse.

2. What we do not collect

We do not store visitor IP addresses. A short-lived HMAC hash derived from the request is used to filter repeat taps and is cleared on a daily schedule. Country information comes from a trusted proxy header and is stored only as a two-letter country code, never with an IP address.

3. Why we use it

• To create and secure your account and keep you signed in.
• To render your public profile and let visitors open your links.
• To show you click totals, trends, sources, devices and countries.
• To send verification, password-reset and account-deletion emails.
• To prevent abuse, enforce limits and keep the service reliable.

4. Cookies and sessions

Link Hub uses a session cookie to keep you signed in. It is HTTP-only in production and expires after 7 days. We do not use advertising cookies or third-party tracking pixels.

5. How long we keep it

• Raw click events: up to 90 days, then purged after daily rollups.
• Daily click totals: for the life of the link, so your history remains after raw events are purged.
• Sessions: 7 days, or until you sign out.
• Verification and reset tokens: 24 hours and 1 hour respectively, then pruned.
• Deleted accounts: 30 days of grace, then permanently removed.

6. Sharing

We do not sell personal data. We share data only with service providers that help us host the application and deliver email, under contracts that limit their use of it, or where required by law. Analytics shown on your dashboard are about aggregate recorded clicks, not identifiable visitors.

7. Your choices

• Export your profile, links, categories and daily analytics at any time.
• Unpublish your profile instantly from the Profile page.
• Change your email or password in Settings.
• Sign out one session or every other session in Settings.
• Delete your account and restore it during the 30-day grace period.

8. Security and children

Passwords are stored as hashes, sessions are rotated on password change, and access to owned resources is scoped to the signed-in user. Link Hub is not directed at children under 13, and we do not knowingly collect their data.

9. Contact

For privacy questions or requests, email privacy@linkhub.app. See also our Terms of Service.