1. Information We Collect

When you create an account, we collect:

• Email address (for authentication and account communications)
• Username and display name (for your public profile)
• Profile information you choose to provide (bio, avatar)
• Links you add to your page
• The IP address you sign up from, used to stop referral fraud and deleted after 30 days
• For each sign-in, the IP address and browser type of that session, used to keep your account secure and deleted 90 days after the session was last used
• Where you first arrived from: the referring site, the landing page and campaign tags, kept in your browser and saved with your account if you sign up. An ad click ID is included only if you accepted cookies.
• If you file a report or a withdrawal: your name, email address and signature, kept for three years

If you sign in with Google, we receive your name and profile photo from your Google account to pre-fill your profile. We do not receive your Google password or access to other Google services.

Your page’s statistics (views, link clicks, referring sites and sources) are counted in our own database when people visit your page. Vercel Analytics separately measures how our own site is used, in aggregate and without cookies.

2. Public Profile & Homepage Display

Your profile (username, display name, avatar, bio, and links) is public by default at socialslink.com/your-username. Anyone with the link can view it, and search engines may index it.

We also display aggregate and individual data on our homepage for social proof:

• Total counts — the number of creators and the total clicks across all pages. We never reveal your individual identity in these figures.
• Featured profiles — your page, and your photo, only appear in the homepage Featured row or the row of creator photos near the top of the homepage if you switch it on yourself in Settings. It is off unless you choose it, and switching it off removes you. We never add a page there on your behalf.

People who subscribe to a creator’s page. If you enter your email address in a creator’s “Get updates” form, we store it with the page you subscribed to and share it with that creator, who can export it and is responsible for how they use it. We delete it when you ask us at hello@socialslink.com, when the creator removes you, or when the creator deletes their account.

Your page’s total views and each link’s click count are public, and we use page views to order the creators who opted into the Featured row. Your email address and payment details are never shown.

3. How We Use Your Information

Your information is used to:

• Provide and display your public profile page
• Show you analytics about your profile performance
• Process payments for Pro subscriptions
• Enforce content policies and maintain platform safety
• Send essential account-related communications, including billing notices and, when you subscribe, a copy of your subscription terms
• Send product emails, such as weekly page stats and getting-started tips, which you can stop with the unsubscribe link in each email
• Improve and maintain the service

4. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security policies. Payment information is handled entirely by Stripe and never stored on our servers. Avatar images are stored in Supabase Storage with restricted file type validation.

Where your information is stored. Our service providers store and process personal information in the United States and other countries outside Canada. While it is there, it is subject to those countries’ laws and may be accessed by their courts, law enforcement and national security authorities.

5. Data Sharing

We do not sell, rent, or trade your personal information. We only share data with service providers necessary to operate the platform:

• Supabase — database hosting, authentication, and file storage
• Stripe — payment processing
• Vercel — application hosting and anonymous analytics
• Resend — transactional email delivery
• Google — sign-in (only if you choose Google) and, only if you accept cookies, Google Analytics (usage measurement) and Google Ads (ad measurement and remarketing)
• Google Web Risk — the web address of each website link on a Pro page, checked against Google’s list of unsafe sites when it is added and daily after (the address only, nothing about you)
• Cloudflare — bot protection (Turnstile) on the signup form when it is switched on, which receives your IP address and browser details
• ImprovMX — forwarding of email you send to @socialslink.com addresses
• Twitch and Kick — live stream status for pages that link a channel (see Section 6)
• Discord — if you connect a Discord webhook, go-live announcements are posted to your server

We may also disclose information if required by law, legal process, or to protect the rights, safety, or property of SocialsLink, our users, or the public.

6. Cookies & Tracking

Essential cookies keep you signed in and protect the site. These are always on, because the Service does not work without them.

Everything else is off until you say yes. The first time you visit we ask, and no advertising or analytics cookie is set in the meantime. (We do note, in your browser only, which site and campaign link you arrived from; it reaches us only if you sign up.) If you accept, we use Google Analytics to understand how the site is used (page views, approximate location, device type) and a Google Ads tag to measure whether our ads work and to show you ads elsewhere. If we ever add another advertising partner it is covered by the same choice and loads only if you accepted. If you decline, none of them load at all. You can change your mind at any time with Cookie settings at the bottom of any page, and declining is a single click — the same as accepting.

If you accept, Google, as a third-party vendor, uses cookies to show you our ads on other sites based on your visits to socialslink.com, and Google Analytics and Google Ads cookies are used together to measure those ads. You can turn off personalised ads from Google at myadcenter.google.com, or opt out of many ad vendors at optout.aboutads.info.

If your browser sends a Global Privacy Control signal, we treat that as a decline and never ask.

Vercel Analytics collects aggregate usage data without cookies and without tracking you across sites, so it runs regardless of your choice.

Live stream status. If a page links a Twitch or Kick channel, we may check whether that channel is live. Our servers do the check and send Twitch or Kick only the channel name already shown on the page; your browser does not contact them for this.

7. Data Retention

We retain your account data for as long as your account is active. When you delete your account, all associated data (profile, links, avatar, and analytics) is permanently deleted from our systems. Deleted data can remain in encrypted database backups for up to 7 days until those backups expire; it is never restored to the live Service. Payment records may be retained by Stripe as required by financial regulations. We keep a record of the subscription terms a buyer agreed to and the copy we emailed them for three years, because consumer law requires it, and a minimal record that an account was deleted so the deletion cannot be undone by accident.

8. Your Rights

You have the right to:

• Access your personal data at any time
• Update your profile information from the Settings page
• Delete your account and all associated data
• Request a copy of your data by contacting us
• Withdraw consent for optional data processing

9. Children's Privacy

SocialsLink is for general audiences. Users must be at least 13 years old to create an account. Where we rely on consent for cookies, a person under 16 in the EU or UK (or the lower age set by their country) needs a parent’s consent. Creators may not aim their page at children under 13 or use Email Capture or tips on a page meant for children. We do not knowingly collect personal information from children under 13. If we learn that we have, we will promptly delete it. If you believe a child under 13 has an account, email hello@socialslink.com with the page link: we take the page down within 2 business days and delete the account and its data.

10. International Users (GDPR/CCPA)

For EU/EEA users (GDPR): You have the right to access, rectify, erase, restrict processing, object to processing, and port your data. The controller is 1232216 B.C. Ltd., 101-1388 Continental St, Vancouver, BC V6Z 0C9, Canada, reachable at hello@socialslink.com. Our legal bases are: performing our contract with you (running your account and page); your consent (analytics and advertising cookies, which you can withdraw at any time in Cookie settings); and our legitimate interests (security, abuse prevention and improving the Service). We keep account data while your account is open and delete it when you delete the account, as described in Section 7. Data is transferred to the United States where our service providers operate, protected by standard contractual clauses. Contact us to exercise these rights. You also have the right to lodge a complaint with the data protection authority where you live.

For California users (CCPA/CPRA): We do not sell personal information for money. California law also treats the use of an advertising tag — in our case Google Ads — as “sharing” personal information for cross-context behavioural advertising, so we describe it that way rather than hiding behind the word “sell”. That sharing only ever happens if you accepted cookies. To opt out, decline the cookie banner, or choose Cookie settings at the bottom of any page and decline — that is our Do Not Sell or Share My Personal Information mechanism, and we also honour Global Privacy Control automatically. You may request to know what data we hold and request deletion. We will not discriminate against you for exercising these rights.

For Canadian users (PIPEDA): As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect, use, and disclose personal information only for the purposes identified in this policy and with your consent. You may withdraw consent at any time by contacting us or deleting your account.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes through the Service or via email where possible. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Privacy Officer and Complaints

1232216 B.C. Ltd. has designated a Privacy Officer who is responsible for our compliance with privacy law. Contact: Privacy Officer, 1232216 B.C. Ltd., 101-1388 Continental St, Vancouver, BC V6Z 0C9, Canada, hello@socialslink.com. We respond to access and correction requests within 30 days. If you are not satisfied with our response, you can complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

13. Contact

For privacy concerns or data requests, email us at hello@socialslink.com or visit our Contact & help page.