Privacy

• Your email address (for sign-in).
• An optional name, so the dashboard isn't impersonal.
• Your custom domain and the short links you create.
• Billing details (handled by Stripe — we never see your card number).

When someone clicks one of your short links, we record:

• Timestamp of the click.
• Approximate country, region, and city (from IP geolocation).
• Device type, browser, and operating system (from User-Agent).
• Referrer URL, when the browser sends one.
• A SHA-256 hash of the IP address combined with the link ID — used only to count unique visitors. We never store the raw IP.
• A long-lived browser cookie (_lsv) containing a random ID, so unique-visitor counts work across IP changes.

We try to filter out obvious bots and scanners using User-Agent heuristics so your analytics reflect real humans.

If you turn on lead capture for a link, visitors will be asked for a name and email before being redirected. Those names and emails are visible only to you in your dashboard, are exportable as CSV, and are deleted when the link is deleted or your account is closed. You — not LinkStats.io — are responsible for using those addresses lawfully and for honoring requests to delete or unsubscribe.

• We don't sell, rent, or share your data with advertisers.
• We don't fingerprint visitors or build cross-site profiles.
• We don't run third-party tracking pixels on your short links.
• We don't use your data to train AI models.

• Click data: kept for as long as your account is active.
• Captured leads: kept until you delete them or the link.
• When you delete your account, your profile, links, click data, and leads are removed within a few days. Hashed IPs disappear with the click rows.

• Lovable Cloud / Supabase — database, authentication, file storage.
• Cloudflare — custom-domain SSL and edge network.
• Stripe — billing and payments.
• Mailgun (via Lovable Email) — transactional emails like sign-in links.
• ipapi.co — IP geolocation fallback when edge geo isn't available.

You have the right to access, correct, export, or delete the personal data we hold about you. Most of these you can do yourself in Settings (export via CSV, delete via Danger Zone). For anything else, email hello@linkstats.io and we'll respond within 30 days.

If you're a visitor to a link tracked by a LinkStats.io customer, the customer is the data controller for that click data. Reach out to them first; if you can't, email us and we'll forward the request.

If we change anything material, we'll update the "last updated" date and email account holders at least 14 days before the change takes effect. Continued use after that means you accept the new policy.