Privacy Policy

1. Data We Collect

WarpLink collects minimal data to provide link redirection and analytics:

• Click analytics: When a user clicks a WarpLink short link, we record the link identifier, timestamp, country, device type, OS, browser, and a one-way hash of the IP address. We never store raw IP addresses.
• Account information: Email address and display name provided during sign-up (via email, GitHub, or Google OAuth).
• Billing information: Payment details are processed and stored exclusively by Stripe. We do not store credit card numbers.

We do not collect personally identifiable information (PII) from link visitors. We do not use the Apple Identifier for Advertisers (IDFA). Our mobile SDKs use the Identifier for Vendors (IDFV), which is exempt from App Tracking Transparency (ATT) prompts.

2. Cookies

WarpLink uses session cookies via Auth.js for authenticated dashboard sessions only. We do not place tracking cookies on link redirects. No third-party advertising or analytics cookies are used.

3. How We Use Your Data

• Provide link redirection and analytics services
• Display aggregated click analytics in your dashboard
• Process subscription payments via Stripe
• Send transactional emails (team invitations, billing notifications)
• Monitor errors and improve service reliability via Sentry

We never sell your data to third parties. We never share data with advertisers.

4. GDPR Compliance

IP addresses are hashed using a one-way function before storage — raw IP addresses are never persisted. You can export or delete your data at any time via the API. To request data deletion, contact us at privacy@warplink.app.

5. CCPA Compliance

California residents have the right to know what personal information we collect, request deletion, and opt out of data sales. WarpLink does not sell personal information. To exercise your rights, email privacy@warplink.app.

6. Data Retention

Click analytics data is retained based on your plan tier:

• Free: 90 days
• Starter: 180 days
• Growth: 365 days
• Scale: 3 years (1,095 days)

Account information is retained for the duration of your account. Upon account deletion, all associated data is permanently removed within 30 days.

7. Third-Party Services

We use the following third-party services to operate WarpLink:

• Cloudflare: Edge network for link redirects and DNS (global)
• Neon: Serverless Postgres database (US region)
• Stripe: Payment processing
• Sentry: Error monitoring
• Resend: Transactional email delivery
• Formspree: Contact form submissions

8. Data Processing Locations

Link redirects are processed at Cloudflare's global edge network (300+ cities worldwide). Dashboard data and click analytics are stored in Neon Postgres in the US region. Stripe processes payment data in the US.

9. ATT Compatibility

WarpLink does not collect the Apple Identifier for Advertisers (IDFA). Our iOS SDK uses the Identifier for Vendors (IDFV), which does not require an ATT consent prompt under Apple's current guidelines. WarpLink is fully compatible with apps that respect ATT.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of WarpLink after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or data requests, contact us at privacy@warplink.app.