Privacy policy
Last updated: 2026-11-08
Draft for Sprint 1. This text has not yet been reviewed by a lawyer and may change before public launch.
Who we are
SmartLink Intelligence is a free shortlink and smartlink service. This policy explains what personal data the service handles during its early, account-only stage.
What we collect
Account data: your email address, a display name, your chosen interface language and a password stored only as an Argon2id hash.
Security and operations data: session records, login events and audit entries that help us secure your account. IP addresses and user agents are hashed or truncated rather than stored in full.
Consent records: whether you accepted the terms and whether you opted in to marketing email, with the time and source of that choice.
How we use it
To create and secure your account, send transactional email such as verification and password-reset messages, and to prevent abuse.
We send marketing email only if you opted in, and you can withdraw consent at any time.
We do not sell your email
We do not sell, rent or trade email addresses or other personal data. The service is free and is not funded by advertising or data brokerage.
Cookies
We use a strictly necessary HttpOnly session cookie to keep you signed in and a CSRF cookie to protect your requests. We use a local preference to remember your colour theme. We do not use advertising cookies.
Your choices and rights
From account settings you can download an export of your data and permanently delete your account. Deleting your account removes your profile, sessions, tokens, preferences and consents; audit records are retained only in anonymised form.
Depending on where you live you may have additional rights, such as access, correction or objection. Contact the operator of this service to exercise them.
Retention and security
We keep data only as long as needed for the purposes above. Passwords are hashed, tokens are stored hashed and expire, and authentication endpoints are rate limited.
No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.
Changes
We may update this policy as the product grows, for example when link analytics launch. We will update the date above and, for material changes, notify account holders.