LinkLabsProgrammable link control
Back to home

Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect minimal information necessary to provide our services:

  • Account information: Email address, password hash (PBKDF2-SHA256), and optional profile data.
  • Link data: URLs you shorten, custom aliases, access policies, and analytics events.
  • File metadata: Names, sizes, and storage references for uploaded files (files stored in private R2).
  • Usage data: IP addresses, user agents, and timestamps for link access (analytics purposes only).

2. How We Use Your Data

We use your data solely to:

  • Provide link shortening and file sharing services
  • Enforce access controls (passwords, OTP, expiry)
  • Generate analytics dashboards for your account
  • Send transactional emails (OTP codes, notifications)
  • Prevent abuse and ensure platform security

3. Data Storage & Security

All data is stored in Cloudflare's infrastructure (D1 for database, R2 for files). We employ industry-standard security measures:

  • PBKDF2-SHA256 password hashing with 100K iterations
  • HMAC-signed cookies for access grants
  • SHA-256 hashed OTP codes with 5-minute expiry
  • Strict rate limiting and CSRF protection
  • All data encrypted in transit (TLS 1.3) and at rest

4. Third-Party Services

We use the following third-party services:

  • Cloudflare: Infrastructure (Workers, D1, R2, Queues)
  • Resend: Transactional email delivery

We do not share your data with advertisers, analytics companies, or any other third parties beyond what's necessary to operate the service.

5. Cookies & Tracking

We use only essential cookies: session authentication and access grants for protected links. We do not use tracking cookies, advertising cookies, or any third-party analytics scripts.

6. Your Rights

You have the right to:

  • Access all data associated with your account
  • Export your links and analytics via CSV
  • Delete your account and all associated data
  • Update or correct your personal information
  • Opt out of non-essential emails

To exercise these rights, contact us at privacy@linklabs.app.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove all personal data within 30 days. Analytics data may be retained in aggregated, anonymized form for platform improvements.

8. Changes to This Policy

We may update this Privacy Policy as our service evolves. We'll notify you of significant changes via email or dashboard notification. Continued use after changes constitutes acceptance.

9. Contact Us

Questions about privacy? Contact us at privacy@linklabs.app.