Privacy Policy

Effective Date: July 27, 2026

LinksTo.fyi ("we," "us," "our") operates the URL shortening and link management service at https://linksto.fyi. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

1. Information We Collect

Account Information: When you register, we collect your email address, display name, and a password. Your password is hashed using bcrypt before storage — we never store plaintext passwords and cannot retrieve yours.

Link Data: When you create a short link, we store the destination URL, slug, optional labels, campaign tags, and notes you provide.

Click Analytics: When someone clicks a short link, we record:

• A hashed version of the visitor's IP address (not the raw IP)
• The HTTP referrer (where the click came from), if available
• The user agent string (browser/device information)
• The date and time of the click

Important: We hash IP addresses using a one-way algorithm. We cannot reverse the hash to recover the original IP address. This protects the privacy of people who click your links.

2. How We Use Your Data

• To provide the link shortening, redirection, and analytics service
• To authenticate your account and protect your session
• To send password reset emails when you request them
• To respond to support requests you submit
• To enforce rate limits and prevent abuse
• To generate aggregate, anonymized usage statistics for system monitoring

3. What We Do NOT Do

4. Data Storage & Security

Your data is stored on secured servers hosted in the United States. We implement the following security measures:

• Passwords: Bcrypt-hashed with per-user salts
• Sessions: Server-side session management with secure cookies
• Forms: CSRF token protection on all form submissions
• Input: Parameterized SQL queries to prevent SQL injection; output escaping to prevent XSS
• IP addresses: One-way hashed before storage

5. Data Retention

Active accounts: Your account data and link data are retained as long as your account is active.

Archived links: When you delete a link, it is soft-archived — not permanently destroyed. The slug remains reserved to prevent others from claiming it (protecting your printed materials). Archived links are not publicly accessible and do not redirect.

Free account auto-expiration: Links on free accounts that receive no clicks for 180 consecutive days may be automatically archived. Upgraded accounts are exempt from auto-expiration.

Account deletion: You may request full account deletion by contacting support@linksto.fyi. Upon deletion, your personal data is removed, but archived slugs are retained to prevent re-registration abuse.

6. Cookies

We use a single session cookie to keep you logged in. We do not use advertising cookies, tracking cookies, or any third-party cookie services.

7. Third-Party Services

The only third-party services used are:

• Google Fonts: For loading the Inter typeface on our pages. Google may receive the visitor's IP address as part of this request. See Google's Privacy Policy.
• DreamHost: Our hosting provider. See DreamHost's Privacy Policy.

We do not integrate with any advertising networks, social media trackers, or data brokers.

8. Your Rights

You may:

• Access your data at any time through your dashboard
• Export your link data as CSV
• Correct your account information through your profile settings
• Delete individual links (soft-archive) or request full account deletion

9. Children's Privacy

LinksTo.fyi is not intended for use by individuals under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance.

11. Contact

For privacy-related questions, data requests, or account deletion:

• Email: support@linksto.fyi
• Support form: linksto.fyi/support