Privacy Policy

Who is responsible

OnlyLinks is operated by Personaflow LLC, based in Delaware, United States. This policy describes our handling of information for accounts, service operations, link protection, and first-party page analytics. Contact privacy@onlylinks.me about privacy questions or requests.

Creators control the content and destinations on their pages. If you follow an external link or give information directly to a creator or another service, their privacy practices also apply. This policy does not describe the practices of other services simply because they have the same owner.

Information you provide

Account information includes your email address, account identifier, and profile information supplied during registration or through a sign-in service you choose. We also process information needed to sign you in and keep your account secure.

We process the content you enter, upload, or choose to import, such as profile details, links, images, videos, draft pages, and publishing preferences. We also process domain connection details and authorization information when you connect a domain or related provider.

For paid plans, we process subscription status, billing identifiers, and transaction information needed to manage access and payments. Payment details are handled through our billing providers. If you contact us, we process the information and correspondence you send.

Information from visits and protection checks

When you visit the service or a protected link, we process information such as IP address, browser and device information, visit time, referring site, and verification results. We use this information to screen traffic, challenge suspicious visits, prevent abuse, and keep the service available.

Published-page analytics record page views and link clicks, visit times, referring sites, and approximate location, such as country and city. We do not collect your device’s precise GPS location for these reports. Page owners receive activity counts and breakdowns, rather than your sign-in credentials or payment details.

Private drafts, editor previews, visitor previews, and downloaded exports are not counted as published-page traffic. Reports summarize activity by page, link, source, and location.

Why we use information

We use information to create and secure accounts, provide protected links, store and publish content at your direction, manage domains and subscriptions, produce first-party analytics, respond to requests, diagnose problems, and meet legal obligations.

Where applicable law requires a legal basis, we rely on performance of our agreement with you for account and paid-service functions; legitimate interests in securing, maintaining, and understanding use of the service; and compliance with legal obligations. Where consent is required for an optional activity, we rely on that consent, which you may withdraw without affecting earlier lawful processing.

Cookies and browser storage

We use cookies and similar technology to keep you signed in, verify visits, and remember service preferences. The editor also saves local drafts, media, and editing progress in your browser. A theme-preference cookie can persist for up to one year.

You can manage cookies and local storage through your browser. Blocking required storage may prevent sign-in or verification from working. Clearing local storage may remove drafts or media that have not been saved to your account. Signing out does not necessarily erase all locally stored editor data.

When information is shared

We share information with service providers that help us manage accounts, process payments, provide the service, and prevent fraud or abuse. The information shared depends on the task, and may include account details, payment information, IP addresses, browser information, or verification results.

Publishing makes the content in your published page available to visitors. Account owners can view analytics for their pages. Services or domain providers you choose to connect receive the information needed to carry out that connection.

We may disclose information when required by law, to respond to valid legal process, to investigate abuse, or to protect people and the service. Information may also be transferred as part of a merger, acquisition, or sale of relevant business assets, subject to applicable privacy obligations.

How long information is kept

We keep account information, saved content, and operational records for as long as needed to provide the service, maintain security, resolve disputes, and satisfy legal or accounting requirements. The appropriate period depends on the type of information and why it is held. Closing an account does not necessarily require immediate deletion of records we must lawfully retain.

Daily page analytics are generally kept for up to one year, and temporary visit records for up to two days. Deletion occurs periodically, so it may not happen immediately when a retention period ends. Security and billing records may be kept for different periods according to their purpose and legal requirements.

Local editor data remains in your browser until it is cleared or replaced. Copies of published content retained by visitors or independent websites are outside our control.

Security and international processing

We use safeguards designed to protect information. No internet service can guarantee complete security. Keep your account credentials secure and contact us if you believe your account or information has been compromised.

Personaflow LLC operates in the United States, and our providers may process information in other countries. Privacy laws may differ from those where you live. International processing is subject to any transfer protections required by applicable law. You can contact us for information about the safeguards relevant to your data.

Your choices and rights

You can edit account and page information through the available controls and manage publishing and billing in your account. For account closure, deletion, or other privacy requests, email privacy@onlylinks.me. We may need to verify your identity or an authorized representative’s authority before acting on a request.

Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a portable copy of personal information, restrict or object to processing, withdraw consent, or appeal a decision on a request. Some requests may be limited by legal obligations or the rights of others. We will explain any applicable limitation. We will not discriminate against you for exercising rights provided by law.

You may also complain to the privacy regulator in your jurisdiction. If your request concerns information collected directly by a creator or an external destination, contact that party as well.

Children and policy updates

OnlyLinks is not directed to children under 13, and we do not knowingly collect their personal information to create accounts. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. Higher local age requirements may also apply.

We may update this policy when the service or our practices change. The date above identifies the current version. We will provide additional notice of material changes where required by law. Send questions to privacy@onlylinks.me.