Privacy Policy

LinkRealm (linkrealm.app) is operated by Cormac O'Neill, a sole trader based in Ireland. We are the data controller for the personal data described in this policy.

For anything about your data, email admin@linkrealm.app. We'll reply, and we'll answer formal data requests within one month.

If you create an account, we store:

• Your email address, and — if you sign in with Google — the account identifier and basic profile details Google returns to us. We never receive your Google password.
• Your page content: username, display name, bio, avatar, links, theme and appearance settings, and any images you upload.
• Your plan and subscription status, plus the identifiers our payment provider gives us so we can match a payment to your account.
• Basic technical records such as sign-in timestamps, kept for security.

We do not buy personal data about you, and we do not sell or rent your data to anyone.

When someone views a public LinkRealm page or clicks one of its links, we record a timestamp, the referring website's domain, a coarse device type (mobile, tablet or desktop) and, where our host provides it, a country code.

We do not store IP addresses, we do not set analytics cookies, and we do not track anyone across other websites. To count a visitor once per day we derive a short salted hash from the request that changes every day and differs for every profile — it cannot be used to follow a person across days, pages or sites.

• To create and run your account and publish your page — necessary to perform our contract with you.
• To take payment and manage subscriptions — necessary to perform our contract with you, and to meet legal accounting obligations.
• To show you page analytics and to keep the service secure and free of abuse — our legitimate interest in running a working, safe product, balanced against the minimal, non-identifying data involved.
• To send you service emails (sign-in links, password resets, billing and important changes) — necessary to perform our contract.
• To send optional product updates, if you opt in — consent, which you can withdraw at any time.

We use only what's needed to make the product work: a sign-in session token so you stay logged in, and local storage in your browser to remember editor state such as your draft design. There are no advertising cookies, no tracking pixels and no third-party analytics scripts on our pages.

Because we set no non-essential cookies, there's no cookie banner to click through.

We keep the list short. To run LinkRealm we use:

• Our hosting, database and authentication infrastructure provider, which stores your account and page data and serves your public page.
• Stripe, which processes payments. Card details go straight to Stripe — LinkRealm never sees or stores your card number.
• An email delivery provider for service emails such as sign-in and billing messages.

These providers act on our instructions and are bound by contract to protect your data. We'll update this section if the list changes.

Some of our providers operate outside the European Economic Area. Where data is transferred outside the EEA, it's covered by the safeguards recognised under GDPR — typically the European Commission's Standard Contractual Clauses or an adequacy decision.

• Account and page data: for as long as your account exists.
• Page analytics: kept in aggregate for up to 24 months, then deleted.
• Payment and invoice records: kept for as long as Irish tax law requires, normally six years.
• Deleted accounts: Settings → Delete account removes your profiles, links, uploads, analytics and subscription record. Deletion is immediate and permanent, aside from the billing records we're legally required to retain.

Under GDPR you can ask us to:

• give you a copy of the personal data we hold about you,
• correct anything that's wrong,
• delete your data,
• export your data in a portable format,
• restrict or object to how we use it, and
• withdraw consent where we relied on it.

Email admin@linkrealm.app and we'll handle it. If you're unhappy with our response you can complain to the Irish Data Protection Commission at dataprotection.ie.

Data is encrypted in transit, access to your account data is restricted at the database level so one account can't read another's, and payment data never touches our servers. No service can promise perfect security, but if a breach affects your data we'll tell you and the Data Protection Commission as GDPR requires.

LinkRealm isn't intended for people under 16. If you believe a child has created an account, email us and we'll remove it.

If you add a YouTube or Spotify link, that provider loads content on your page under its own privacy policy (YouTube embeds use the no-cookie domain). Once a visitor clicks through to another website, that site's policy applies, not ours.

If we change this policy we'll update the date at the top, and we'll email account holders before any material change takes effect.