Your information,
clearly explained.

We collect information in the following ways:

• Account and billing information. Your name, email address, profile image, authentication and session information, IP address, device information, and subscription details. Payments are processed by Polar. We receive billing and transaction status, but not your full payment card number.
• Content you provide. Page names and slugs, links, text, settings, images, and other content you upload, save, or publish through Linkdrop.
• Usage and public-page activity. Page views, clicks and other interactions, page paths, referring pages, browser and device information, and approximate country, region, and city derived from request information. We may use cookies or similar browser storage for authentication, security, and pseudonymous analytics identifiers.
• Linkdrop product analytics. On Linkdrop-owned screens, such as our marketing, account, onboarding, and editor interfaces, we collect route categories and selected feature, conversion, and error events. A limited sample of marketing and gallery sessions may be replayed to help us diagnose usability problems; form inputs and visible text are masked. Customer-owned public pages are excluded from this browser product tracking and session replay.
• Communications. Information you include when you contact us for support, make a privacy request, submit a Plus priority request, or otherwise communicate with us. Priority requests also include the relevant page and basic browser information so our team can investigate and respond.

We use information to:

• Provide, operate, maintain, and improve Linkdrop.
• Create accounts, authenticate users, and keep accounts secure.
• Save, publish, deliver, and manage Linkdrop pages and uploaded media.
• Process subscriptions and keep billing access in sync.
• Provide page owners with aggregate analytics about views and interactions.
• Send essential account messages and, for eligible accounts, optional weekly analytics summaries that can be disabled at any time.
• Prevent fraud, abuse, security incidents, and violations of our terms.
• Review and respond to support, feedback, and Plus priority requests.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and protecting Linkdrop, your consent, or compliance with law.

We do not sell or rent personal information. We share information only where needed to operate Linkdrop, including with service providers that support hosting, cloud storage, databases, content delivery, payments, security, and website functionality. Our primary providers include Amazon Web Services for infrastructure, Polar for billing and payments, Resend for application email delivery, and PostHog for product analytics, limited session replay, and application error monitoring.

For platform health, Linkdrop may send PostHog one daily total built from our existing public-page analytics, such as total views, pseudonymous unique visitors, and interactions. That summary is component-agnostic and does not include a page slug, page URL, component type, visitor identity, or page content. A customer public page may also report a sanitized runtime error without its slug or content so we can detect broken experiences.

Content you publish is public and can be viewed, copied, or shared by anyone. When you link to a third-party website or service, that third party’s privacy practices apply.

We may also disclose information when required by law, to protect the rights and safety of Linkdrop or others, or as part of a merger, financing, acquisition, or sale of all or part of our business. We will require a successor to handle personal information consistently with this policy.

We keep account information and page content while your account and pages remain active. Raw public-page analytics events are retained for 30 days; aggregate counts may be retained longer so page owners can understand performance over time.

Unfinished image uploads generally expire after 24 hours, and uploaded images that are no longer referenced generally expire after 7 days. When paid access ends, page data may be scheduled for deletion after a 30-day recovery period. Billing, security, legal, and backup records may be kept longer where reasonably necessary or required by law.

Priority requests and their response status are kept while reasonably needed to respond, improve Linkdrop, maintain support history, and resolve disputes. They are removed with the associated account unless a longer period is required for legal or security reasons.

Product analytics, sampled replay, and application error data are retained only as reasonably needed to understand product use, diagnose problems, and improve Linkdrop, subject to the retention settings applied to our analytics provider.

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information. You may also have the right to object to or restrict certain processing, withdraw consent, or complain to your local privacy regulator.

You can update much of your page information directly through Linkdrop. For other requests, email privacy@mail.linkdrop.bio. We may need to verify your identity before completing a request. You can also control or delete cookies and browser storage through your browser settings, although disabling essential storage may affect account features. Weekly analytics summaries can be disabled from your account or through the unsubscribe link in any summary without affecting essential account emails. Linkdrop's product analytics also honors browser Do Not Track where supported.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security, so we cannot promise that information will never be accessed, used, or disclosed improperly.

Linkdrop and its providers may process information in countries other than your own, including the United States. Where required, we use appropriate safeguards for these transfers. Linkdrop is not directed to children under 13, and we do not knowingly collect personal information from them.

To report a suspected security vulnerability, email security@mail.linkdrop.bio.