Privacy

LinkMyBio (“we”) provides a link-in-bio mini site at linkmybio.co. This notice explains what we store for Creators who build pages, Visitors who open them, and Subscribers who leave their email on them, and who receives that data.

What we store for Creators

• Your account: email address, sign-in details such as passkeys and two-factor settings, trial dates, and how far you got through setup.
• Your Profiles: username, Drafts, Published pages, and settings such as collaborators, including the email address of anyone you invite.
• Your uploads: images, video, audio and files you add, plus how much storage you have used.
• Your plan: plan name, billing interval, status, and the customer and subscription IDs from our billing provider. We do not store card details.
• If you use the Instagram import: the public name, bio, photo and bio links you ask us to bring in, saved only if you keep them.

What we store for Visitors

Views of and clicks on Published pages are recorded as first-party events in our own database, and no analytics cookie is set. Each event holds the view or click, the Page and Block, the referring site’s host name, country, device type, UTM tags, click position, screen width, and a hash of the IP address and browser that changes every day. We do not store the IP address itself.

Published pages load images and files directly from Amazon Web Services, so it sees the Visitor’s IP address and browser details. If a Creator adds an embed, such as a video or a booking calendar, that provider loads inside the page under its own privacy terms.

What we store for Subscribers and people who write in

If you leave your email in an Email block, we store it with the Block it came from, the consent text you saw, and a daily hash of your IP address. If you use a contact form, we store your name, email address, message, and the same kind of hash. A poll vote is stored with a daily hash only.

That data belongs to the Creator whose page you used, and we process it on their behalf. They can read, export and delete Subscribers and messages. A Creator can also connect a webhook, which sends new Subscribers’ email addresses to a service they choose. To change or remove your details, contact that Creator or email us.

Who receives data

We do not sell personal data. These providers process data for us and each receives only what its job needs:

• Vercel hosts LinkMyBio and handles every request, including IP addresses.
• Supabase provides our database and sign-in. It holds everything above except uploaded files.
• Amazon Web Services S3 stores uploaded media and delivers it to browsers.
• Resend sends email and receives the recipient’s address and the message, such as sign-in emails, trial reminders and collaborator invites.
• Paddle is our merchant of record and receives your email address, account ID and chosen plan. It collects your payment details directly and handles billing and tax under its own privacy terms.
• PostHog receives page views, interactions and product events from our marketing pages and the Studio. We do not load it on Published pages, and we do not tell it who you are.
• Sentry receives error reports from our servers, marketing pages and the Studio. Its browser script never loads on Published pages.
• Upstash rate limits username checks and imports. It receives a hash of your IP address that changes every day, never the address itself.
• Apify receives only the Instagram handle you enter during the onboarding import, and only when we cannot read the public profile ourselves.
• Google receives your sign-in request if you choose to sign in with Google.

Cookies

Signing in sets session cookies so you stay signed in. Opening a locked link can set a cookie that remembers you unlocked it. PostHog uses a cookie and local storage on our marketing pages and in the Studio.

Keeping and deleting data

We keep your data while your account exists, except raw view and click events, which we delete after 13 months. You can export your Profiles and Subscribers, or delete your account, from the account page in the Studio.

Deleting your account cancels your subscription, deletes the media used by your current Drafts and Published pages, and deletes your account, Profiles, Subscribers, messages and analytics from our database. Your usernames stay reserved for a while so nobody can take them over. Files that no current Profile uses can remain in storage, so email us if you need them removed. Paddle keeps its own billing records.

Contact

Questions: privacy@linkmybio.co