Privacy Policy

1. Introduction & Overview

LinkSheild ("we," "our," or "us"), operated at https://linksheild.my, is dedicated to protecting the privacy, brand safety, and digital reach of content creators, influencers, and digital businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, APIs, short links, and bio link services.

2. Information We Collect

We collect information you provide directly, as well as operational data collected automatically:

• Account Credentials: Name, email address, and cryptographically hashed passwords (using salted bcrypt). We never store plaintext passwords.
• Creator Profile & Bio Data: Custom usernames, page bios, uploaded avatars, display titles, configured public Safe-For-Work (SFW) links, and sensitive/monetized destination links.
• Payment & Billing Data: All payments, subscriptions, and Tip Jar transactions are processed directly by our payment partner, Stripe, Inc. We do not store full credit card numbers or banking secrets on our servers.
• Visitor & Telemetry Data: When visitors access your bio or short links, we record anonymized click analytics, generalized geographic regions (country/city level), browser/device types, and referral headers.
• Bot & Turnstile Verification Data: We utilize Cloudflare Turnstile to verify genuine human visitors before revealing sensitive links. Turnstile collects non-invasive browser telemetry to differentiate human visitors from automated scrapers without tracking personal identifiers.

3. How We Use Your Information

We use the collected information for the following legitimate purposes:

• Providing, maintaining, and enhancing the LinkSheild bio protection and short link infrastructure.
• Rendering platform-compliant Safe-For-Work bio pages by default and securing sensitive destinations behind Turnstile-verified gates.
• Generating real-time click and referral analytics in your creator dashboard.
• Facilitating commission tracking through our Endorsely affiliate partner program (linksheild.my/s/partnerships).
• Sending essential account notifications, security alerts, and password recovery emails via Resend.
• Preventing malicious bot scraping, abusive automated crawlers, fraud, and terms violations.

4. Turnstile Verification & Crawler Protection

By default, all visitors (both automated platform crawlers and human visitors) are served a platform-compliant Safe-For-Work bio page. Sensitive or monetized destinations are locked behind a "Reveal All Links" challenge powered by Cloudflare Turnstile. Automated crawlers (such as TikTok, Instagram, Meta, or Google scrapers) cannot solve Turnstile verification and therefore never see, index, or flag sensitive links. Legitimate human followers complete verification in approximately one second.

5. Third-Party Service Providers

We work with trusted third-party infrastructure providers who process data strictly on our behalf:

• Stripe: Payment processing, subscriptions, and creator Tip Jar payouts.
• Cloudflare: DNS routing, edge CDN, and Turnstile CAPTCHA challenge infrastructure.
• Resend: Transactional email delivery and password reset notifications.
• Endorsely: Affiliate partnership tracking and rev-share management.

6. Data Retention & Security

We apply industry-standard security measures including TLS 1.3 encryption in transit, HMAC-SHA256 authenticated session tokens, and salted bcrypt password hashing. We retain your account information for as long as your account remains active. You can delete your account and associated profile data at any time from your account settings.

7. Your Privacy Rights (GDPR & CCPA)

Depending on your location, you have the right to request access to the personal data we hold about you, request corrections or updates, request complete deletion of your account and personal information, or object to certain processing activities. To exercise any of these rights, contact us at [email protected].

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data handling practices, please reach out to: