Skip to content

Privacy

What we store, what we deliberately don't, and how long any of it is kept.

Last updated October 2026

The short version

There are no accounts, no cookies and no click or visit tracking. We store the links and bio pages people make, the reports and messages people send us, and a short-lived, irreversible counter used to stop spam. That's all.

When you shorten a link

We store the destination you pasted, the short code, and the time it was made.

We don't store who made it: not your IP address, not a cookie, not a device fingerprint. Once a link exists, nothing connects it to you. That also means we can't edit or delete a link for you on the basis that you made it, because we have no way to tell.

When you make a bio page

We store what you put on the page: its name, blocks, design and search settings. We also store a one-way hash of its private edit key, never the key itself, which is why a lost edit link can't be recovered. As with links, nothing records who made the page.

Images on bio pages are linked from wherever the page's author hosts them; we don't store image files.

When someone visits a bio page

Nothing is recorded: no page views, no clicks. But a bio page can show images hosted elsewhere and embed players from YouTube, Vimeo, Spotify or SoundCloud, chosen by the page's author. Your browser loads those directly from those services, which can see your IP address and may set their own cookies under their own policies. YouTube embeds use its reduced-cookie domain.

When someone follows a short link

Nothing is recorded. The redirect looks up the code and sends the visitor on. No click is counted, no cookie is set, and no information about the visitor is stored.

Where an IP address is used, and how

To stop one source flooding the service, link creation, abuse reports and contact messages are rate limited. Attempts are counted against a salted hash of the address, never the address itself. The hash can't be reversed to recover an IP, and the counters are deleted within a day.

Our hosting provider processes IP addresses to deliver requests, as any infrastructure does. That is separate from what this site stores.

Reports and messages

When you report a link or use the contact form, we store what you submit:

  • Abuse reports: the link, the reason, any details you add, and an email address only if you give one
  • Contact messages: your name, email address, subject and message

Both are also emailed to the person who runs the service, because that's how they get read. They're kept for as long as needed to deal with them.

QR codes and UTM links

Both tools run entirely in your browser. Nothing you type into them, including Wi-Fi passwords and contact details, is sent to us.

Cookies

We set none. Embedded players on bio pages may set their own (see above). See the cookie policy.

Who else is involved

The site runs on Vercel and the database is Neon PostgreSQL. Reports and messages are delivered by email through our email provider. Those providers process data on our behalf to run the service. We don't sell data and there are no advertisers.

Asking about any of this

Email support@linkmint.org or use the contact form. If something here doesn't match what you observe, tell us. That would be a bug, and it matters.