Data & privacy

Privacy Policy

Last updated: July 1, 2026

This policy describes how Linky ("we", "us") handles information when you use our hosted link management service at our website and dashboard.

Information we collect

Account data. When you sign in with Google, GitHub, or email magic link, we receive and store your name, email address, and profile image (if your sign-in provider supplies one) to create and operate your account.

Link data. We store the URLs you shorten, custom slugs, routing rules, expiry settings, custom domain configuration, and link metadata you provide (titles, descriptions, tags, and folder assignments).

Developer settings. If you use Business features, we store API key metadata (hashed secrets, names, and creation dates), webhook endpoint URLs and event subscriptions you configure, and audit log entries for account actions you perform in the dashboard.

Click analytics. When someone visits a short link, we may record the timestamp, referrer, device type, country (derived from IP or proxy headers), browser, operating system, and UTM campaign parameters. To count unique visitors, we use a salted hash of the visitor IP — we do not store raw IP addresses for deduplication.

Usage data. We may collect how you interact with our marketing site and dashboard (pages viewed, features used) through privacy-focused analytics tools such as PostHog.

How we use information

We use collected information to:

  • Provide, maintain, and improve the service
  • Authenticate you and secure your account
  • Process redirects and routing rules you configure
  • Show analytics and reports in your dashboard
  • Send magic-link sign-in emails when you request them
  • Detect abuse, spam, and security issues
  • Comply with legal obligations

We do not sell your personal information.

Cookies and similar technologies

We use essential session cookies to keep you signed in to the dashboard. Short-link redirects for your audience do not require visitors to accept cookies.

Analytics tools may use cookies or local storage on our marketing site and app. You can block these with browser settings or extensions.

Third-party services

We rely on third parties to operate the service, including:

  • Cloud hosting and database providers
  • Identity providers (Google, GitHub) when you choose them
  • Email delivery for magic-link sign-in
  • Product analytics (e.g. PostHog), when enabled

These providers process data on our behalf under their own privacy policies and our instructions.

Data retention

We retain account and link data while your account is active. If you delete links or close your account, we delete or anonymize associated data within a reasonable period, except where retention is required for security, legal compliance, or dispute resolution.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing.

To make a request, contact us via GitHub issues. We will respond within a reasonable time.

Children

Linky is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

International users

Your information may be processed in countries other than where you live. By using the service, you consent to transfer and processing in those locations, subject to applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use after changes means you accept the updated policy.

Contact