Privacy Policy
Last Updated: September 2026 • Effective Date: September 2026
Our Core Privacy Principle
At Link In The Bio (inthebio.link), we believe your audience and your data belong to you. We do not sell your personal information, we do not deploy invasive third-party ad retargeting trackers, and we maintain minimal data collection necessary to power your bio page at edge speed.
1. Information We Collect
We collect only the essential information required to operate our service:
- Account Credentials: Your email address and authentication identifiers provided during Google OAuth or passwordless magic link sign-in.
- Creator Profile Data: Chosen username handle, display name, biographical text, uploaded avatar images, and published link destinations.
- Payment Information: All subscription billing transactions are securely handled directly by Stripe, Inc. We never receive, process, or store credit card numbers or banking security codes on our infrastructure.
- Aggregated Visitor Analytics: Anonymous page visit and link click counts (referrer domains, mobile vs. desktop device type, and UTC timestamps) to provide Pro creator analytics. We do not store raw IP addresses or personally identifiable visitor profiles.
2. How We Use Your Data
Your information is used strictly to:
- Render and deliver your public bio profile worldwide across global edge content delivery networks (sub-50ms latency).
- Route custom domains (e.g.,
links.yourbrand.com) with automated TLS/SSL certificates. - Display creator analytics charts to Pro subscribers.
- Manage account authentication, subscription tier entitlements, and security notifications.
3. Data Sharing & Third-Party Processors
We never sell, rent, or trade your personal data. We utilize industry-leading, compliant infrastructure partners to provide the service:
- Supabase: Encrypted PostgreSQL database and authentication engine protected by strict Row-Level Security (RLS).
- Cloudflare R2: Secure cloud object storage for creator avatars and media assets.
- Stripe: PCI-DSS Level 1 compliant payment processing for Pro subscriptions.
- Vercel: Global edge compute, automated SSL provisioning, and serverless runtime.
- Google Analytics (GA4): Analyzes aggregated platform traffic, performance, and visitor engagement metrics to improve reliability and user experience.
- Google AdSense & Certified CMP: Serves display advertisements on free-tier bio pages. Google and its third-party advertising partners use cookies to serve ads based on user visits. We deploy Google's certified Consent Management Platform (CMP) under the IAB Europe Transparency and Consent Framework (TCF v2.2), ensuring visitors in the EEA, UK, and Switzerland can explicitly consent, decline, or manage cookie options at any time.
4. Your Rights & Account Deletion (GDPR & CCPA)
Regardless of your geographic location, we extend full data autonomy rights to all users:
- Right to Access & Export: You may review and update your profile information, links, and avatar at any time in your dashboard.
- Right to Erasure (Account Deletion): You can permanently delete your account directly inside Dashboard > Settings. Free accounts are purged immediately along with all links, analytics, and R2 media. Pro subscriber accounts are deactivated immediately and permanently purged when the prepaid billing cycle completes without renewal.
5. Contact Our Privacy Team
If you have any questions regarding this Privacy Policy or our security practices, please contact us at privacy@inthebio.link or via our Contact Support page.