Privacy Policy — BareLink

This Privacy Notice explains how BareLink ("BareLink", "we", "us") handles personal data. BareLink is the data controller for information processed through this service.

1. Data we collect

Page content you submit: display name, bio, avatar image, links, theme, and slug.
Edit token: we store only a SHA-256 hash of the token you use to edit a page. The token itself is never stored on our servers.
Payment metadata: when you purchase a Pro unlock, we store the Paddle transaction ID associated with the page. Payment details (card, address, tax info) are collected and processed by Paddle — we never receive or store them.
Technical data: minimal request logs (IP, user agent) may be processed by our hosting providers for security and abuse prevention.

2. How we use it

To render and serve your public link page.
To verify your edit token when you modify a page.
To verify Pro purchases and unlock paid features.
To protect the service against abuse and comply with legal obligations.

3. Legal basis

We process data on the basis of (a) performance of the contract to provide you the service, (b) our legitimate interests in operating and securing the service, and (c) legal obligations where applicable.

4. Sharing and subprocessors

Paddle.com Market Ltd — Merchant of Record for all payments, subscription management, tax compliance, and invoicing.
Supabase / Lovable Cloud — database, storage, and hosting.
Authorities where required by law.

5. Retention

Page content is stored until you delete the page. Payment records are retained as required by tax and accounting laws. Data is deleted or anonymised when no longer needed.

6. Your rights

Depending on your jurisdiction you may have the right to access, rectify, delete, restrict, or port your personal data, and to object to processing. To exercise these rights, contact us at the address below. You also have the right to lodge a complaint with your local supervisory authority.

7. International transfers

Data may be processed outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Security

We apply reasonable technical and organisational measures including encryption in transit, access controls, and hashed edit tokens. No system is 100% secure.

9. Cookies

BareLink itself does not set tracking or marketing cookies. The Paddle checkout may set cookies strictly necessary to process your payment.

10. Contact

For privacy questions or data requests, contact BareLink through the support channel listed on the homepage.