Privacy Policy
Last updated 30 August 2026
This policy explains what Linkonz does with personal data. It covers three different groups of people, and what we do differs for each, so it says which is which throughout.
1. Who we are
Linkonz is a service that lets creators publish a single page which collects email addresses and accepts payments. It is operated by Linkonz.com.
For the processing described in this policy, Linkonz.com is the data controller except where section 3 says otherwise.
Privacy questions and requests, including anything in section 10: privacy@linkonz.com. We answer within one month. We have not appointed a Data Protection Officer, which the law requires only of organisations whose core activity is large-scale monitoring or large-scale processing of special category data; ours is neither.
2. The three groups this policy covers
- Creators — people with a Linkonz account and a page.
- Supporters — people who sign up for a creator's updates, or who pay a creator through their page.
- Visitors — anyone who loads a creator's page without signing up or paying.
3. Who controls supporter data
This is the part most likely to matter to you, so it is stated plainly rather than buried.
When a supporter gives their email address on a creator's page, Linkonz decides how long that address is kept, where it is stored, and — on our free plan — whether the creator can read it at all. Because we make those decisions, Linkonz is the controller of supporter contact data, not merely a processor acting on a creator's instructions.
When a creator is on a paid plan, or otherwise unlocks and exports addresses, the creator becomes an independent controller of the copy they hold from that moment. What they then do with it — what they send, how long they keep it, whether they import it into another tool — is their responsibility, governed by their own privacy notice, and outside our control.
Where Linkonz does act as a processor for a creator, the terms of that processing are in our Data Processing Addendum.
4. What we collect from creators
| Data | Why | Lawful basis |
|---|---|---|
| Email address | Signing in (we email a link — there are no passwords), and service notices such as a payment landing or a dispute being raised | Performance of a contract |
| Page content: display name, bio, profile photo, all the wording you choose | Publishing your page | Performance of a contract |
| Stripe account identifier, country, currency, and whether charges are enabled | Showing or hiding your payment button, and reporting your earnings back to you. We never receive your bank details, identity documents or Stripe login | Performance of a contract |
| Billing records for a paid plan: Stripe customer and subscription identifiers | Charging the subscription | Performance of a contract |
| Session records and rate-limit counters | Keeping you signed in and keeping the service standing up | Legitimate interests — securing the service |
| Server logs | Diagnosing faults and investigating abuse | Legitimate interests — operating the service |
5. What we collect from supporters
| Data | Why | Lawful basis |
|---|---|---|
| Email address, and first name if the creator asks for one | So the named creator can send you the updates you asked for | Consent, given by you on that creator's page |
| The date and time you consented, and which form you used | Proving consent was given, as the law requires | Legal obligation |
| The referral code in the link you arrived through, if any | Telling the creator which of their posts brought you | Legitimate interests — measuring which content works |
| If you pay: your email and name as given to Stripe, the amount, the currency, whether it recurs, and Stripe's identifiers for the payment | Sending your receipt, and reporting earnings to the creator | Performance of a contract, and legitimate interests in keeping accurate records |
We never see your card details. Payment details are entered on Stripe's own systems and never reach Linkonz.
We do not send marketing to supporters and we do not sell or rent supporter data to anyone, ever. The only emails Linkonz sends a supporter are the receipt for a payment you made, and — inside that receipt — an optional, unticked invitation to join the creator's list if you are not already on it.
6. Addresses we hold that the creator cannot read
On our free plan, a creator can read and export only the first 5 email addresses collected through their page. Later addresses are still collected and still stored — the creator sees that they exist and sees them partly masked, but cannot read or export them until they subscribe to a paid plan.
We are telling you this here because it has a consequence you are entitled to know: if you sign up to a free creator's list and they never subscribe, they may never be able to email you, even though you asked them to. Your address sits with us in the meantime.
We think holding data that cannot currently be used for the purpose it was given for should be time-limited rather than indefinite, so it is: see section 8. You can withdraw consent and have the address erased at any time, whether or not it has been unlocked, using the unsubscribe link in any email or by contacting privacy@linkonz.com.
7. What we collect from visitors, and cookies
When a page is loaded we record a visit: the time, the creator it belongs to, the referral code in the link if there is one, and whether the request came from a phone, a desktop browser or an app's built-in browser. This is so a creator can see how many people saw their page and which post sent them.
We do not use cookies or any other storage on creator pages, and we run no third-party analytics, advertising or tracking scripts of any kind. Visit records are written on our server and are not tied to a profile of you. We do not store your IP address against a visit; IP addresses are used only transiently for rate limiting and appear in short-lived server logs.
The only cookie Linkonz sets anywhere is a sign-in cookie for creators on the dashboard, which is strictly necessary to keep them signed in and needs no consent.
8. Who we share data with
| Who | What | Why |
|---|---|---|
| The creator whose page you used | Your email address, name if given, the referral code, and your consent date. On a free plan, only the first 5 addresses are readable | This is the purpose you gave it for. The creator becomes an independent controller of it — see section 3 |
| Stripe — Stripe, Inc. and its group companies | Payment details you enter directly with them, plus the amount, currency and our reference codes | Processing the payment. Stripe is an independent controller for its own fraud, identity and legal-compliance purposes. See Stripe's Privacy Policy |
| Cloudflare, Inc. | Everything Linkonz stores: the database, uploaded profile photos, and outgoing email | Hosting, storage and email delivery. Cloudflare acts as our processor |
| Professional advisers, or an acquirer | Only as needed | Legal and accounting advice; or a merger, acquisition or insolvency, in which case we will tell affected people beforehand where we can |
| Law enforcement or regulators | Only what is required | Where we are legally obliged. We will tell you unless we are prohibited from doing so |
Our current list of processors is in Annex 3 of the Data Processing Addendum, which is kept up to date.
9. How long we keep things
- Creator accounts — for as long as the account exists. When a creator deletes their account, their page, widgets, contacts, tracked links and visit records are deleted immediately.
- Supporter addresses on a paid plan — until the supporter unsubscribes or asks for erasure, or the creator deletes their account.
- Addresses a creator has removed from their list — a creator removing someone hides that person from their list and their exports, and nothing further is sent. The record is not erased at that point: it is kept so the creator can undo a mistake, and because on a free plan the removed record continues to occupy one of the 5 readable slots, which is what stops the limit being bypassed by deleting and re-reading. If you want your record actually erased rather than hidden, say so and we will erase it — see section 10.
- Supporter addresses a free creator has not unlocked — kept for 12 months from collection. If the creator has not subscribed to a paid plan by then, we delete them. Holding an address indefinitely for a purpose that is not being fulfilled is not something we are willing to do.
- Unsubscribe records — we keep the fact that an address unsubscribed, so we can honour it. Say the word and we will erase that too, accepting that we then cannot recognise the address if it is re-added.
- Payment records — kept for 6 years to meet tax and accounting obligations. When a creator deletes their account, supporter names and email addresses are stripped from these records and only the amounts, dates and reference codes remain.
- Visit records — 14 months.
- Server logs — 30 days.
10. Where data goes
Linkonz runs on Cloudflare's network, and our processors operate internationally, so personal data may be processed outside the UK and the European Economic Area — including in the United States.
Where that happens, transfers are covered by the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, together with the additional measures our processors publish.
Our database — which holds every email address we have collected — is created with a jurisdiction constraint so that it runs and stores data within the European Union. As a UK controller we may transfer to the EEA without additional safeguards, because the UK recognises the EEA as providing an adequate level of protection.
Not everything can be constrained this way. Our key-value store — which holds hashed session tokens, rate-limit counters and short-lived caches — is distributed across Cloudflare's global network and cannot be pinned to a region. It holds no supporter email addresses. Uploaded profile photos are stored in object storage, which can be constrained in the same way as the database.
You can ask us for a copy of the safeguards that apply, at privacy@linkonz.com.
11. Your rights
Under the UK GDPR and the EU GDPR you have the right to ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to it; the right to receive it in a portable form; and the right to withdraw consent at any time, without that affecting anything done before you withdrew it.
Supporters can come straight to us. You do not have to go through the creator, and you do not need an account. Every email we send you has a one-click unsubscribe link, and you can write to privacy@linkonz.com for anything else. We will respond within one month.
Erasure means erasure. There is a difference between a creator removing you from their list — which hides your record and stops anything being sent, but keeps it so they can undo the removal — and you asking to be erased. When you ask, we delete the record from the database rather than flag it. The only thing that may remain is an entry on a suppression list, and only if you want one, so that we can recognise your address and keep it off the service in future.
Creators can export their readable contacts and delete their account at any time from the dashboard, without asking us. Deletion is immediate and cannot be undone.
If you are unhappy with how we have handled your data you can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EU it is the authority in the country where you live or work. We would rather you told us first so we can put it right.
12. How we protect data
Data is encrypted in transit. Sign-in links and session tokens are stored only as irreversible hashes, so a copy of our session store would not let anyone sign in as you. Card details never touch our systems. Access to production data is limited to people who need it. The technical and organisational measures we commit to are set out in Annex 2 of the Data Processing Addendum.
No service can promise it will never suffer a breach. If one occurs and it is likely to risk your rights, we will tell the relevant authority within 72 hours and tell you without undue delay where the law requires it.
13. Children
Linkonz is not intended for children. Creators must be at least 18 to hold an account. We do not knowingly collect data from children below the age of consent for information society services in their country. If you believe we have, tell us at privacy@linkonz.com and we will delete it.
14. Changes to this policy
If we change this policy in a way that materially affects you, we will email creators before it takes effect, and update the date at the top. Continuing to use Linkonz after that date means the new version applies. Previous versions are available on request.