Privacy

What we collect

Your account

Your email address, a display name if you set one, and a profile photo if you upload one. Authentication is handled by Supabase; we never see or store your password.

What you put on your page

Your handle, bio, links, appearance settings, declared niche and any exclusions you configure. Your published page is public by design — that is the point of it — so treat anything you put there as public.

Feeds you add

The addresses you give us and the posts we read from them: title, URL, publish date and thumbnail. We only read feeds you add yourself, and only ever read — we never post anywhere as you.

Visitor analytics on your page

When someone clicks a link on your page we record which link, the referring site’s domain, a coarse device type (mobile, desktop, tablet) and a country, which comes from our CDN. We record page views the same way.

We do not store visitor IP addresses. An address is hashed, used to enforce rate limits, and the hash is discarded within a day. We do not set advertising cookies and we do not build visitor profiles across sites.

Billing

If you subscribe, we store the customer and subscription identifiers our payment processor gives us, plus your plan and its status. Card details go directly to the processor and never reach our servers.

Support

If you write to us, we keep what you sent so we can answer it and so the next person handling it can see the history.

How curation uses your data

A curation pass reads the links on your page, how they have been performing, and the recent posts in your feeds. It sends a condensed version of that — titles, URLs, click counts, your niche — to Anthropic’s API to produce the suggestions you see.

Your email address, your visitors’ data and your billing details are never part of that request. Anthropic does not train models on API inputs.

Who else processes your data

We use a small number of services, each for one job:

• Supabase — database, authentication and file storage
• Vercel — hosting and the CDN that serves your page
• Anthropic — the model behind curation suggestions
• Stripe and PayPal — subscription payments
• Resend — transactional email, such as batch notifications
• Sentry — error reports, with cookies and query strings stripped before they are sent

We do not sell your data, and we do not share it with anyone for advertising.

How long we keep it

Raw click and page-view events are deleted after 90 days. Daily totals derived from them are kept for as long as your account exists, so your long-term trends survive without us holding the underlying events.

Everything else is kept while your account is open. When you delete your account it goes immediately and in full, not after a grace period.

What you can do

Export. Account settings has an Export button that produces a JSON file containing your account, pages, links, feeds, suggestions, activity and curation history.

Delete. The same screen deletes your account. That removes your pages, links, feeds, click history and everything else, and it cannot be undone.

Correct or ask. Most things are editable in the app. For anything else, write to hello@linkedlist.ai.

If you are in the UK, EU or another region with statutory data rights, those rights apply and the mechanisms above are how we meet them.

Cookies

We set one kind of cookie: the session cookie that keeps you signed in, plus a small cookie remembering which of your pages you last had open. Both are necessary for the product to work and neither is used for tracking. Your public page sets no cookies at all for visitors.

Changes and contact

If this changes materially we will say so by email rather than quietly editing the date at the top.

Questions, requests or complaints: hello@linkedlist.ai.