Effective date: June 24, 2026
This Privacy Policy explains how LinkDirect.co collects, uses, stores, and shares personal data when you visit LinkDirect.co, create an account, use the LinkDirect dashboard, create or click a smart link, connect a domain, purchase a subscription, or contact us.
1. Who operates LinkDirect
LinkDirect.co operates the LinkDirect platform and acts as the data controller for the personal data described in this Privacy Policy, unless another party determines the purposes and means of processing.
Privacy questions and requests may be sent to:
2. Data we collect
Account information
When you create or use an account, we may process:
email address;
name, if provided;
password hash;
account ID;
account role and status;
date of registration;
date of last login;
account and notification preferences.
Passwords are not stored in plain text.
Subscription and payment information
When you purchase a subscription, we may process:
Stripe customer ID;
subscription ID;
invoice ID;
payment status;
subscription status;
billing period;
currency and transaction amount;
invoice links;
limited payment method information such as card brand and last four digits, where provided by Stripe.
Complete card details are processed by Stripe and are not stored by LinkDirect.
Smart link information
When you create or manage a link, we may process:
destination URL;
URL parameters;
link slug;
custom hostname;
link status;
link creation and update dates;
metadata retrieved from the destination website;
campaign and UTM settings.
Destination URLs may contain information entered by the account owner. Users must not place sensitive personal data in URLs unless they have a valid legal basis and appropriate safeguards.
Click and routing information
When someone opens a LinkDirect smart link or uses an enabled site script, we may process:
date and time of the request;
pseudonymous IP hash;
user agent;
device type;
operating system;
browser and in-app browser context;
referring page or domain;
language and locale;
time zone;
screen resolution;
approximate country;
link and visit identifiers;
routing events and outcomes;
actions such as opening, continuing, copying, or using a fallback.
The full IP address may be temporarily available to our server and infrastructure providers during a network request. LinkDirect does not intentionally store the full IP address in its click analytics database. A pseudonymous hash may be created for security, deduplication, and analytics.
Custom domain information
When you connect a domain or subdomain, we may process:
hostname;
DNS and verification status;
SSL and Cloudflare hostname identifiers;
verification tokens in protected or hashed form;
dates of verification and status checks.
Contact and support information
When you contact us, we may process:
name;
email address;
company name, if provided;
message content;
technical information needed to investigate the issue;
correspondence and delivery status.
Cookies and preference information
We may process information stored in cookies or browser storage, including:
login session;
selected language;
selected time zone;
cookie preferences;
temporary event deduplication data.
More information is available in our Cookie Policy.
3. Why we use personal data
We may use personal data to:
create and manage accounts;
authenticate users and protect accounts;
provide smart links and routing;
generate click and routing analytics;
connect and verify custom domains;
process subscriptions and payments;
send transactional emails;
provide customer support;
prevent fraud, abuse, spam, and security incidents;
improve platform performance and usability;
comply with legal obligations;
establish, exercise, or defend legal claims;
measure website usage and marketing effectiveness where consent is required and obtained.
4. Legal grounds
Depending on your location and the context, we may rely on:
performance of a contract, when processing is necessary to provide LinkDirect;
legitimate interests, including platform security, service improvement, fraud prevention, and reliable analytics;
legal obligations, including accounting, tax, and compliance requirements;
consent, particularly for optional analytics or advertising technologies where required;
establishment or defense of legal claims.
Where we rely on consent, you may withdraw it at any time without affecting processing performed before withdrawal.
5. How click analytics work
LinkDirect processes technical information to determine the relevant browser environment and provide the routing flow.
Routing may vary based on technical factors such as:
social application or browser context;
operating system;
device type;
browser capabilities;
referrer;
available fallback options.
This is automated technical routing. It is not intended to make decisions that produce legal or similarly significant effects for the person clicking the link.
Customers may receive analytics about their links, including aggregated or event-level information about source, device, browser environment, country, and routing outcome.
Customers do not receive the visitor’s full IP address through the standard LinkDirect dashboard.
6. How long we keep data
We retain data only for as long as reasonably necessary for the purposes described in this Policy.
Current general retention periods may include:
account data: while the account remains active and afterward where needed for legal, security, or accounting purposes;
raw click and routing events: generally up to 365 days;
aggregated statistics: for as long as reasonably needed to provide historical reporting;
password reset tokens: until expiration or scheduled deletion;
transactional email logs: generally up to 365 days;
subscription and payment records: for the period required for accounting, dispute, fraud prevention, and legal purposes;
contact messages: for as long as needed to respond and maintain an appropriate record;
cookies: according to the periods listed in the Cookie Policy;
backups: until overwritten or deleted according to our backup cycle.
We may retain information for longer where required by law, necessary to resolve a dispute, or needed to protect the platform from abuse.
7. Service providers
We use service providers to operate LinkDirect. Depending on the services enabled, these may include:
Cloudflare
Used for network delivery, security, SSL certificates, domain routing, bot protection, and approximate country detection.
Stripe
Used for subscriptions, payments, invoices, and billing management.
Resend
Used to send transactional and service-related emails.
Google Analytics
May be used to understand website usage where enabled and where the required consent has been obtained.
Meta Pixel
May be used to measure website activity or advertising performance where enabled and where the required consent has been obtained.
Hosting and database providers
Used to host the LinkDirect application, MySQL database, Redis, backups, and supporting infrastructure.
These providers may process data according to their own terms and data processing arrangements.
8. International transfers
Some providers may process data in countries outside your country or outside the European Economic Area.
Where required, we use appropriate safeguards for international transfers, such as contractual protections, recognized transfer mechanisms, or providers participating in an applicable privacy framework.
9. Cookies and analytics
Essential cookies may be used without optional consent where they are necessary to:
keep users logged in;
maintain security;
remember cookie preferences;
provide language and time-zone settings;
support requested platform features.
Optional analytics and advertising technologies should only be activated where an appropriate legal basis exists, including consent where required.
You can learn more in the LinkDirect Cookie Policy.
10. Data security
We use reasonable technical and organizational measures designed to protect personal data, including:
encrypted HTTPS connections;
hashed passwords;
signed session cookies;
role-based access;
parameterized database queries;
rate limiting;
bot protection;
restricted administrative access;
IP pseudonymization for click analytics;
monitoring and backup procedures.
No online system can be guaranteed to be completely secure.
11. Your rights
Depending on the law applicable to you, you may have the right to:
access your personal data;
correct inaccurate data;
request deletion;
restrict processing;
object to certain processing;
withdraw consent;
receive a portable copy of certain data;
complain to a competent data protection authority.
To submit a request, contact:
We may need to verify your identity before completing the request.
Some information may need to be retained where required by law, necessary for billing records, security, fraud prevention, or legal claims.
12. Responsibilities of LinkDirect customers
A LinkDirect customer may independently determine why a smart link is created, where it leads, and which campaign parameters are included.
The customer is responsible for:
having a lawful basis for its campaign;
providing any required notices to its audience;
using personal data and tracking parameters lawfully;
avoiding sensitive information in destination URLs;
complying with advertising, affiliate, cookie, and privacy requirements;
responding to requests concerning personal data controlled by that customer.
Depending on the use case, LinkDirect and the customer may have separate legal responsibilities.
13. Children
LinkDirect is intended for professional and commercial use and is not designed for children.
Do not create an account or provide personal data if you are not legally permitted to use the service.
14. Account deletion
You may request account deletion by contacting [email protected].
Before deleting the account, we may require identity verification and settlement of outstanding obligations.
Some billing, transaction, security, and legal records may be retained after account deletion where permitted or required by law.
Deleting an account may deactivate its links, site scripts, and custom domains.
15. Changes to this Policy
We may update this Privacy Policy when our services, providers, or legal requirements change.
The current version will be published on LinkDirect.co. For material changes, we may also provide notice through email or the LinkDirect dashboard.
16. Contact
For privacy questions, requests, or complaints, contact:
Service data processing update — August 2026
Current LinkDirect features include smart links, site scripts, URL shortening, smart QR codes, system and external domains, free public tools, click analytics, subscriptions and support. Operating these features may involve account and billing identifiers; destination URLs and campaign parameters; domain, script and QR configuration; support communications; and click metadata such as time, referrer, inferred source, user agent, device, operating system, browser context, country code, language, timezone, screen dimensions and routing outcome.
The application receives the request IP address but stores a stable pseudonymous SHA-256 hash combined with a private server secret in click and free-tool records rather than the raw IP address. Click and site-script events are scheduled for deletion after the configured platform retention period, which defaults to 365 days. Providers used by the current application include Stripe for payments, Cloudflare for network security, Turnstile, DNS and certificates, Resend for email, and—when configured—Google Analytics 4 and Meta Pixel. Some providers may process data outside the EEA under their available transfer safeguards.
Where GA4 or Meta Pixel is configured, it may initialise when a page loads. The current cookie preference records the visitor’s selection but does not technically prevent those configured scripts from loading. Privacy requests may be sent to [email protected].