What we collect

Waitlist signups

If you join the waitlist on linkreflo.com, we collect your email address. That's it. We don't ask for your name, company, or anything else.

Account holders

If you create a LinkReflo account to use the tracking product, we collect:

  • Account data — your email address, a hashed version of your password (we never store plaintext passwords), your account creation date, and a short prefix string that identifies your tracked links publicly.
  • Click events — every time someone clicks a link you've created, we record the link slug that was clicked, the referring URL (the page the visitor came from), approximate country derived from the Cloudflare edge location handling the request, device type inferred from the browser user agent string, the click timestamp, and the originating IP address.

We do not collect anything about what happens after the click — we see the click leave your tracked link, not what the visitor does on Amazon or anywhere else.

Infrastructure logs

Cloudflare automatically logs standard web server data as part of running its edge network — including IP addresses, request paths, HTTP status codes, and timestamps. We don't process these logs beyond what Cloudflare surfaces in its dashboard. See Cloudflare's privacy policy for details on how they handle this data.

How it's stored

All LinkReflo data lives on Cloudflare infrastructure. We don't run our own servers.

  • Click events and account data are stored in Cloudflare Workers KV — a globally distributed key-value store that replicates across Cloudflare's edge network.
  • Waitlist email addresses are stored in a separate KV namespace, isolated from account data.
  • The linkreflo.com website is hosted on Cloudflare Pages.
  • Request processing runs on Cloudflare Workers, which don't have persistent disk storage — they read from and write to KV.

Cloudflare's infrastructure and data practices are governed by their own privacy policy at cloudflare.com/privacypolicy.

How we use your data

We use your data to do one thing: provide the service.

  • Click data is logged so you can see it in your dashboard and export it.
  • Your email address is used to communicate with you about your account — password resets, important service updates, and early access notification if you're on the waitlist.
  • IP addresses captured in click events are used for approximate country identification and bot filtering. We don't build profiles on your visitors.

We don't use your data for advertising, behavioral profiling, or anything outside of operating and improving LinkReflo.

Sharing and third parties

We do not sell, rent, or trade your data. Not your personal information, not your click data, not your visitors' data. Full stop.

The only third party with meaningful access to your data is Cloudflare, our infrastructure provider. They process data as part of running the network that LinkReflo runs on. We don't control their practices — refer to their privacy policy linked above.

We don't use third-party analytics, tracking pixels, or advertising scripts on linkreflo.com. The site is plain HTML served from Cloudflare Pages.

If we're ever required to disclose data by law or legal process, we'll tell you first if we're legally permitted to do so.

Your rights

You have real control over your data:

  • Export — you can download your full click history as a CSV file at any time from the dashboard. No request needed.
  • Delete your account — email privacy@linkreflo.com and we'll delete your account and all associated click data within 30 days.
  • Access — email us and we'll tell you what we hold about you.
  • Waitlist removal — if you're on the waitlist and want off, email privacy@linkreflo.com with "Remove me" in the subject line.

We'll respond to all privacy requests within 14 days.

Data retention

Account holders: Click data and account information are retained for as long as your account is active. When you request account deletion, everything is removed within 30 days.

Waitlist: Email addresses are retained until the waitlist closes or you request removal.

Password reset tokens: These expire automatically after one hour and are deleted on use. They are single-use only.

Contact

Questions, requests, or concerns about this policy:

privacy@linkreflo.com

This policy may be updated from time to time. Material changes will be communicated to account holders by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.