This policy explains what information Lynqr (lynqr.app) collects, why, who we share it with, and the choices you have. It covers two groups of people: customers who sign up and use Lynqr, and visitors who click a Lynqr short link or scan a Lynqr QR code.
Information about customers
| What | Why |
|---|---|
| Name, email address and, if you use one, your Google, Microsoft or GitHub sign-in | To create your account, sign you in and contact you about it |
| Workspaces, members, roles, links, QR codes, designs, logos and uploaded documents | To provide the service you asked for |
| Billing details: plan, subscription status and the last four digits of your card (held by Stripe) | To charge for Lynqr Pro and manage your subscription |
| Sign-in sessions: IP address, browser and time | To keep your account secure, show you your active sessions and alert you to new sign-ins |
| An audit log of changes in your workspace | So owners and admins can see who changed what |
| Notification preferences | To send only the emails you want |
Information about visitors
When someone clicks a Lynqr short link or scans a Lynqr QR code, we record an analytics event so the link owner can see how it performs:
- The date and time, and which link or QR code was used.
- The approximate location (country, region and city) provided by our network provider, Cloudflare, based on the visitor's IP address.
- The device type, browser and operating system, derived from the browser's user-agent string.
- The domain of the referring website, if any.
- A one-way hash of the IP address, salted with a secret, used only to estimate unique visitors. We don't store visitors' IP addresses in analytics.
We filter out known bots and link-preview crawlers. We don't use visitor information for advertising, we don't build profiles of visitors across different customers, and we don't sell it.
Cookies and similar technology
Lynqr only uses cookies that are needed for it to work:
lynqr_session: keeps you signed in (expires after 30 days of inactivity).- Short-lived cookies that remember a password-protected link was unlocked (12 hours) and protect the sign-in flow.
- Your light or dark theme choice is saved in your browser's local storage.
We don't use advertising or third-party analytics cookies. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers.
Who we share information with
We use these service providers to run Lynqr. They process information only on our instructions:
| Provider | Purpose |
|---|---|
| Render | Application hosting and database |
| Cloudflare | Network, DNS, security, visitor location and document storage (R2) |
| WorkOS | Sign-in, single sign-on and account verification emails |
| Stripe | Payments, invoices and tax |
| Resend | Transactional email such as invitations and alerts |
We may also disclose information if the law requires it, to protect people from harm or fraud, or as part of a merger or acquisition, in which case this policy will continue to apply.
How long we keep information
- Account information is kept while your account exists.
- Workspace content and analytics are kept while the workspace exists. When an owner deletes a workspace, its links, QR codes, documents and analytics are deleted immediately from the live database.
- Sessions expire after 30 days without use.
- Copies may remain in encrypted backups for a limited period before they're overwritten.
- Billing records are kept as long as tax and accounting law requires.
Security
We protect information with encryption in transit (HTTPS), hashed session tokens and API keys, role-based access inside workspaces, rate limiting and an audit log. No service can be perfectly secure, so please use a strong, unique password or a single sign-on provider.
Your choices and rights
- Update your name, password and email preferences in Profile.
- Export analytics as CSV, JSON or PDF from Analytics.
- Delete a workspace from Team & Settings → General.
- Ask us for a copy of your information, to correct it, or to delete your account by emailing [email protected].
Depending on where you live, you may have further rights, such as to object to or restrict processing, or to complain to your local data protection authority. Visitors who want information about a specific link should contact the link's owner; we'll help where we can.
Children
Lynqr isn't intended for children under 16, and we don't knowingly collect their information.
International transfers
Our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for these transfers.
Changes
If we make material changes to this policy, we'll let customers know by email or in the app before they take effect.
Contact
Questions or requests: [email protected].