Privacy Policy

Who we are

The Linkt ("we", "us") operates thelinkt.com, a service that lets people and businesses publish a single public page containing their links, contact details and social profiles. For data protection purposes we are the controller of the account data described below, and a processor of the page content you choose to publish.

Data we collect

• Account data: your email address, display name and profile image supplied by the sign-in method you use (Google sign-in or an email magic link).
• Content you create: brand names, page slugs, bios, links, contact details, social handles, uploaded images and appearance settings. This content is public by design once you publish a page.
• Usage analytics: a counted page view or link click event, recorded with a timestamp and the brand it belongs to. We do not store IP addresses, cookies or device fingerprints against these events, and they cannot be used to identify a visitor.
• Technical logs: transient server and error logs generated while serving requests, used to keep the service running and secure.

Why we use it

We use account data to authenticate you and operate your account (necessary to perform our contract with you). We use content you create to render your public page. We use aggregate analytics to show you how your page performs, and technical logs for security and reliability (our legitimate interest in running a safe service). We do not use your data for advertising or profiling.

Sharing and processors

We do not sell personal data and we do not share it with advertisers. Data is processed on our behalf by the infrastructure providers that host the application, database, file storage and authentication layer. Each is bound by a data processing agreement and may only act on our instructions. We may disclose data where legally required, or where necessary to investigate abuse of the service.

International transfers

Our hosting and database providers operate globally, so your data may be processed outside your country of residence. Where data leaves the EEA or UK, transfers rely on the European Commission's standard contractual clauses.

Retention

Account and page data is retained for as long as your account exists. Analytics events are retained for up to 24 months. When you delete your account, your profile, brands, links, appearance settings, contact details, socials, uploaded images and analytics are removed from our production systems immediately and from encrypted backups within 30 days.

Your rights

Depending on where you live, you have the right to access, correct, export, restrict or delete your personal data, to object to processing based on legitimate interests, and to withdraw consent. You can export a complete JSON copy of your data and permanently delete your account from account settings in the dashboard at any time, without contacting us. If you cannot sign in, email hello@crisscrosslab.com from your account address. You also have the right to complain to your local data protection authority.

Children

The Linkt is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from them; if we learn that we have, we delete the account.

Security

All traffic is served over TLS. Data is stored in an access-controlled database with row-level security, so one account cannot read another account's private records. Access to production systems is restricted and logged.

Changes

If we make a material change to this policy we will update the date at the top of this page and, where the change affects you significantly, notify you by email.