Privacy

What we collect

• Account data you provide: name and email. Sign-in happens with a one-time code sent to your email — we never store passwords.
• Profile content you publish: bio, links, products, theme choices.
• Aggregate analytics: page views and link clicks. We store no IP addresses, no cookies, no fingerprinting.
• Raw analytics events are retained for 90 days, then automatically deleted.

Revenue integrations

If you connect Stripe, Dodo Payments or Lemon Squeezy, we store your API key encrypted at rest (AES-256-GCM) and use it only to read payment totals you choose to display. Keys are read-only in spirit: we never issue refunds, create charges, or modify your account. Disconnecting deletes the key and all derived snapshots.

Sponsors

Free profiles display one clearly-labelled sponsor. Sponsor links arerel="sponsored"and never inject scripts or HTML into your page. Outbound sponsor links carry UTM attribution parameters (source, medium, campaign) so sponsors can measure referral traffic — no data about you is added to them. Sponsor placements are month to month: a card is shown only while the sponsor's subscription is active and is removed when the paid period ends without a renewal.

Your control

You can hide your profile at any time, disconnect revenue integrations, and delete your account. Payment records are kept only as long as required by our payment provider.