Legal

Privacy

Last updated September 2026

Linksie is a link-in-bio platform: your page, your domain, your links. We collect as little as possible.

What we store

  • Account details: email and a securely hashed password (Argon2id). Passwords are never stored in readable form.
  • Page content you create: profile, links, social links, images you upload or add by link, themes and custom domains.
  • Email addresses your visitors give your page’s sign-up box, with the source and campaign that brought them. They belong to your list; we don’t use them.
  • Billing records processed by Stripe. We never see or store card numbers.

Analytics

  • Page views and link clicks are counted in aggregate (visitors, views, clicks, sources, devices, browsers, countries).
  • Raw events are kept for a short window (7 days by default) for aggregation, then deleted. Aggregates contain no IP addresses.
  • Crawler visits are logged separately — bot name, a shortened user agent and country — for your crawler radar, and never mixed into visitor figures.
  • We do not sell analytics data or use third-party tracking cookies on creator pages.

Cookies

  • A strictly necessary session cookie keeps you signed in.
  • Anonymous visitor keys may be stored so repeat visits are not double-counted. No advertising identifiers.
  • When a visitor confirms they’re 18 or over, a cookie remembers that for 24 hours on that page, so the 18+ check can be enforced on the server.

Your rights

  • Export your page — profile, links, socials and design — at any time (Settings → Your data, or /api/v1/me/export). Your email list exports as CSV from Insights.
  • Delete your account at any time from Settings. Deletion removes your workspace, page, links, domains, media, analytics and sessions.
  • Contact us about access, correction or deletion requests and we will respond within 30 days.

Processors

Hosting infrastructure (PostgreSQL, Redis), Stripe for payments, your configured email provider for transactional mail, image storage (on our own servers, or an S3-compatible provider), and your domain registrar for purchases. Each processes only what its job requires.

Retention

Account data is kept while your account is active. Backups rotate on the infrastructure schedule. Raw analytics events auto-delete after the retention window.