Privacy Policy

We collect information you provide directly and limited data collected automatically:

• Account data: When you register, we collect your email address and username to create and manage your account.
• Profile data: Display name, bio, avatar image, and the links you add to your link tree.
• URL data: Long URLs you shorten, custom aliases you choose, and click analytics for those links.
• Usage data: When visitors click your short links or public profile, we record anonymized data — browser type, operating system, country, and referrer — for analytics.
• Preferences: Theme preference (dark/light mode) is stored in your browser's localStorage and never sent to our servers.

We use cookies in three categories. You can manage your choices via the "Cookie Preferences" option in the footer.

• Necessary cookies: Required for authentication and session management. Cannot be disabled.
• Analytics cookies: Help us understand aggregate usage patterns. Only activated with your consent.
• Marketing cookies: Used for campaign tracking and relevance. Only activated with your consent.

Your consent preferences are stored as a cookie for 365 days and can be updated at any time.

• To provide, operate, and maintain the Onlylinks service
• To create and manage your account and public profile
• To generate click analytics for your URLs and link tree
• To remember your preferences across sessions
• To improve performance, reliability, and features of the platform
• To communicate important service updates (not marketing emails)

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

We may share data with:

• Infrastructure providers (hosting, databases) who process data on our behalf under strict data processing agreements.
• Law enforcement if required by applicable law or to protect the safety of users.

We retain your account data for as long as your account is active. Click analytics data is retained for up to 12 months. You may delete your account at any time, which will remove your data from our systems within 30 days.

We implement industry-standard security measures including HTTPS encryption, JWT authentication, and rate limiting to protect your data. Passwords are hashed using bcrypt and are never stored in plaintext.

Onlylinks is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will promptly remove the data.

• Access: Request a copy of the data we hold about you.
• Correction: Update inaccurate or incomplete data via your account settings.
• Deletion: Delete your account and associated data.
• Portability: Request an export of your data in a structured format.

We may update this Privacy Policy periodically. Material changes will be communicated by updating the effective date above. We encourage you to review this page regularly.

If you have any questions or concerns about this Privacy Policy, contact us at:

support@onlylinks.in