Privacy policy

Last updated: 23 July 2026

This page explains what LinkCheck does with your data, in plain terms. We've written it to match what the service actually does, not to make promises we can't keep. It describes our practices; it isn't a legal certification, and we don't claim formal compliance labels we haven't verified with counsel.

LinkCheck checks the outbound links on websites you register, affiliate links in particular, and tells you which ones are broken, so you don't lose commissions to dead links.

What we collect

• Your email, to sign you in. We use passwordless sign-in: we email you a link. We store your email address, and a short-lived, hashed version of each sign-in link (never the link itself in plain text).
• The sites you add: the URLs of the sites you register for monitoring, plus a random verification token used to confirm you own a site.
• Scan results: for each scan we store which outbound links were found broken or uncertain. That means the destination URL, the page on your site where the link appears, the HTTP status code, whether the link looks like an affiliate link, and per-scan counts and timestamps. Each report is stored under a random, unguessable token used for its shareable link.
• Subscription data, if you subscribe: a Stripe customer identifier and your subscription status. We never see or store your card details. Stripe handles payment.
• One essential cookie: a session cookie that keeps you signed in (HttpOnly, SameSite=Lax). We use no tracking or advertising cookies and no third-party analytics.

What we do not store

• The content of the pages we scan. We fetch pages to find links and check their status, then discard the page content. We keep only the link status (broken / ok / uncertain) and metadata described above.
• Sensitive data in our logs. Our logs contain only technical metadata: timestamps, event type, duration, counts, and error codes. We do not log page content, email addresses, sign-in tokens, or payment data.
• Card numbers. Payment details live with Stripe, not with us.

How the scanner works

When you register a site, our server visits its publicly accessible pages on your behalf and follows the links it finds to check whether they still work. Specifically:

• It only requests pages that are publicly reachable. It does not sign in, submit forms, or bypass any access controls.
• It respects each target site's robots.txt and applies polite, rate-limited requests per domain.
• All checks run server-side through a sandboxed fetcher that blocks requests to private, internal, and cloud-metadata addresses (anti-SSRF protection), and enforces limits on crawl size, redirects, and timeouts.

How we use your data

To sign you in, run the scans you request or schedule, email you your reports and sign-in links, process your subscription, and operate and secure the service. We do not sell your data or use it for advertising.

Who processes data for us

We share only what each provider needs to do its job. We link their policies rather than restate them:

• Resend sends our emails, such as sign-in links and reports. Your email address is shared to deliver mail. Resend privacy policy.
• Stripe processes subscription payments. Stripe privacy policy.
• Railway hosts our application and database. Railway privacy policy.

How long we keep it

• Sign-in links expire 15 minutes after they're issued.
• The session cookie lasts up to 30 days, then you sign in again.
• Your account, sites, and scan results are kept while your account is active, so you can view your history. They're removed when your account is deleted.

Your choices

You can ask us to delete your account and everything tied to it: your email, the sites you added, your scan results, and any stored tokens. There's no self-service delete button yet, so email us and we'll do it. You can also ask for a copy of the data we hold about you.

Security

We use passwordless sign-in (no passwords to leak), store sign-in tokens only as hashes, serve everything over HTTPS with HSTS, run the scanner behind an anti-SSRF fetcher, and rate-limit our endpoints. No system is perfectly secure, but these are the concrete measures in place.

Changes

If our practices change, we'll update this page and the date at the top.

Contact

Questions, or want your data deleted? Email privacy@postachiara.ch.