1. Who processes your data

The controller is [company name, registered office and contact details to be completed], publisher of lien.to. Privacy contact: [dedicated email to be completed].

2. Account data

We process your email address, optional name and profile picture, password hash, two-factor settings and onboarding answers. Open sessions and workspace actions are retained for security. These operations are necessary to perform our contract and secure the service.

3. Visitors to your links

When someone opens a lien.to link, we measure the country, device, operating system, browser, language, referrer and a daily pseudonymous visitor fingerprint without setting a cookie. The IP address is used for security and approximate location. A click identifier (cid) may be appended to the destination for conversion tracking.

4. Retention

Account data is kept while the account exists, then erased within 30 days. Technical logs are kept for 7 days and backups for 30 days. Detailed analytics follow the retention period of the selected plan [exact periods to be completed].

5. Recipients and transfers

Data is hosted in the European Union. Our subprocessors are listed on the dedicated page. Cloudflare may process IP addresses outside the EU under the European Commission standard contractual clauses.

6. Your rights

You may access, correct, delete or export your data, object to processing or request restriction by writing to [dedicated email to be completed]. You may also complain to the CNIL.

7. Age, cookies and browser signals

The service is intended for people aged 16 or over. The dashboard uses only necessary cookies. We honor Global Privacy Control for optional categories; Do Not Track is noted but has no standardized interpretation.