PRIVACY POLICY

Linklock ("Linklock," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, creator dashboard, public unlock pages, and related services (collectively, the "Service").

This Policy applies to creators who register for accounts and to visitors who interact with public unlock pages. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

This Policy is incorporated into our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.

Creators are users who sign up through Clerk authentication and build unlock campaigns. We process creator account data to provide the Service, billing, support, and analytics.

Visitors are people who open a public unlock link (for example /u/username/slug). Visitors generally do not need a Linklock account. When a creator collects emails or other information from visitors through an unlock step, the creator is responsible for their own privacy obligations to that audience—we process such data on the creator's behalf as described below.

Account and profile information (creators). When you register, we receive information from our authentication provider (Clerk), such as email address, name, username, profile photo, and authentication identifiers. You may also provide a display name, bio, and custom username in your Linklock profile settings.

Campaign and content data. We store unlock campaign titles, descriptions, slugs, step configurations (platform, button labels, external URLs), unlock content (external URLs or text you provide), themes, and publication status. We do not host downloadable files on our servers when you use link-based content types.

Analytics and unlock interaction data. When someone views or uses an unlock page, we may record events such as page views, session starts, step completions, and successful unlocks. We may also store a pseudonymous visitor identifier in a cookie (linklock_visitor) to remember progress through steps on a device. Where available, we may collect coarse metadata such as referrer source, device type, browser, or country derived from request headers or analytics tools.

Audience data. If you use email-collection steps, we store email addresses (and optional names) submitted by visitors in your audience list, associated with your account.

Payment information. If you subscribe to a paid plan, payment details are collected and processed by Stripe. We receive subscription status, plan type, and billing-related identifiers from Stripe—not your full card number.

Communications. If you contact us at ltrobloxbrothers@gmail.com, we retain the content of your messages and associated contact information to respond and maintain support records.

Technical and usage logs. Our hosting and infrastructure providers may automatically log IP addresses, timestamps, user agents, error reports, and performance data necessary to secure and operate the Service.

We use collected information to:

• Create and maintain your account and authenticate you
• Publish and render unlock pages you configure
• Track analytics and show statistics in your dashboard
• Enforce plan limits (such as weekly link quotas on the Free plan)
• Process subscriptions and send billing-related communications via Stripe
• Send optional email notifications you enable (for example unlock alerts via Resend)
• Provide customer support and respond to inquiries
• Detect, prevent, and address fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Improve the Service through aggregated or de-identified analysis

We do not sell your personal information to third parties for their independent marketing purposes.

If you are in the European Economic Area or United Kingdom, we process personal data on one or more of the following bases: performance of a contract with you (providing the Service); legitimate interests (security, analytics, product improvement, fraud prevention); compliance with legal obligations; and consent where required (for example optional marketing emails if we offer them separately).

Creators who collect visitor emails must ensure they have an appropriate legal basis under applicable law (such as consent or legitimate interest) and provide their own notices to visitors.

We may share information with:

• Service providers who help us operate the Service, such as Clerk (authentication), Supabase/PostgreSQL hosting (database), Vercel or similar (hosting), Stripe (payments), Resend (transactional email), Cloudflare or similar (infrastructure), and analytics providers if enabled
• Creators, in the sense that analytics and audience submissions belong to the creator account associated with a campaign
• Law enforcement or regulators when required by law, court order, or to protect rights, safety, and security
• Successors in connection with a merger, acquisition, or sale of assets, subject to this Policy

When visitors unlock content, they may be redirected to third-party URLs you provide (Google Drive, Discord, etc.). Those sites have their own privacy policies—we do not control them.

We use cookies and similar storage technologies for essential Service functions, including keeping creators signed in (via Clerk), remembering visitor progress on unlock pages, and measuring analytics.

You can control cookies through your browser settings. Blocking essential cookies may prevent unlock flows or account access from working correctly.

If we enable third-party analytics (such as PostHog), those tools may use cookies or local storage according to their own policies. We will update this section when such features are active on production.

We retain account and campaign data while your account is active and for a reasonable period afterward to comply with law, resolve disputes, and enforce agreements.

Analytics events and unlock session data may be retained in aggregated or raw form according to operational needs and storage limits. Audience email records remain until you delete them or delete your account, subject to backup retention cycles.

Support emails and security logs may be retained for a limited period appropriate to their purpose.

We implement administrative, technical, and organizational measures designed to protect information, including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your account credentials and for the security of external links you share (for example ensuring Drive permissions are set correctly).

We and our service providers may process data in countries other than where you live, including the United States and European Union regions where our vendors operate data centers. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

Depending on your location, you may have rights to:

• Access personal data we hold about you
• Correct inaccurate data
• Delete your data, subject to legal exceptions
• Restrict or object to certain processing
• Data portability where applicable
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

Creators can update profile information in the dashboard and manage notification preferences in Settings. To request deletion of your account or export of your data, email ltrobloxbrothers@gmail.com. We will respond within a reasonable timeframe as required by law.

Visitors who submitted email addresses to a creator should contact that creator directly. We may assist creators in honoring deletion requests where appropriate.

The Service is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

Unlock pages may link to or embed third-party services (YouTube, Discord, etc.). Your interactions with those services are governed by their privacy policies. We encourage creators and visitors to review third-party policies before providing information on external platforms.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate. Continued use after changes take effect constitutes acceptance of the updated Policy.

For privacy questions, data requests, or complaints, contact:

Email: ltrobloxbrothers@gmail.com

We will work with you in good faith to address concerns about how we handle personal information.