Privacy

Linkium is a link-in-bio service. This page describes what it collects, why, where the data lives and how to remove it. It is written to match what the software actually does, not what a template says it might.

Linkium is currently in alpha: it is free, run by one person, and offered as-is.

What you give us

• Account: email address, display name, handle. Optionally a bio, location, website, avatar image and a resume file, all of which you choose to publish on your own public page.
• Password: stored only as a PBKDF2 hash (100,000 iterations, per-user salt). We cannot read it, and we cannot recover it for you.
• If you sign in with GitHub: your GitHub email address, display name and avatar URL. Nothing is written back to GitHub, and we never see your GitHub password.
• Your content: the links, projects and social accounts you add. All of it is public by design: that is the product.

What visitors to your page generate

When someone opens a Linkium page or clicks one of its links, we record the event so the page owner can see their own traffic. Each event stores the timestamp, the country (from the hosting provider's header, country only, never a city or coordinates), a coarse device type derived from the browser's user-agent string, the referring site, and a visitor hash.

The visitor hash is SHA-256(IP + user-agent + today's date + a server secret). We do not store the IP address or the user-agent themselves, only that hash. Because the date is part of the input, the hash changes every day, so the same person cannot be followed across days, and because a secret is mixed in, nobody can take an IP address and check whether it appears in our data. It exists to keep one person from counting as fifty visitors, not to identify anyone.

A page owner sees counts and aggregates for their own page only. They do not see who you are.

Cookies and similar storage

• Google Analytics 4 counts visits site-wide and sets its own first-party cookies (_ga and similar). It is only loaded if you accept the banner shown on your first visit. Decline, or simply ignore it, and the script is never fetched and no cookie is set. Nothing on Linkium depends on it. If you do accept, that data goes to Google under their privacy policy.
• Your sign-in token is kept in your browser's local storage, not in a cookie. Signing out removes it.
• One flag per browser tab (session storage) so reloading a profile doesn't re-count the view.

Your current choice, and a way to change it:

Where the data lives

• Database and file storage: Supabase, in Singapore (ap-southeast-1). Uploaded avatars and resumes sit in a public bucket, so anyone with the URL can open the file, whether or not your profile is public. Do not upload anything you would not hand to a stranger.
• Hosting: Vercel, with the functions pinned to Singapore.
• Abuse protection: Upstash Redis holds a short-lived request counter keyed by IP address, so one client cannot flood the API. Those keys expire on their own between one minute and one hour after the request.

What we do not do

• We do not sell or rent your data.
• We do not send marketing email. There is no mailing list.
• We do not run advertising or ad-tech trackers.
• We do not publish an index of every account, so your handle isn't scraped in bulk.

Your controls

• Public profile: turn it off in Settings and your page returns 404 to everyone.
• Search engine indexing: turn it off and your page tells crawlers not to index it.
• Edit or remove anything: links, projects, social accounts, avatar, resume, bio.
• Delete your account: Settings → Delete account. This removes your row, and with it your links, projects, socials and analytics rows, and wipes your uploaded files. It cannot be undone, and your handle becomes available to someone else.

One caveat on deletion: an uploaded file that was already fetched may stay in the storage provider's CDN cache for a while after the object itself is gone.

How long we keep things

Account data and content stay until you delete them. Analytics rows stay while the account exists, so owners can look back at their own traffic, and are deleted with the account. Rate-limit counters expire within the hour.

Children

Linkium is not intended for people under 13, and accounts are not knowingly created for them.

Changes

If what the software collects changes, this page changes with it, and the date at the top moves.

Getting your data removed, and getting in touch

Removal is self-service and immediate: Settings → Delete account removes your account, your content and your analytics rows, and wipes your uploaded files. That is faster than asking, and it leaves nothing for anyone to hold onto.

For anything else (a question about this page, or a request you cannot make from the app), email knurfattah@gmail.com. It reaches one person, so give it a day or two.