Legal notice and privacy

Last updated: October 11, 2026

1. Owner and contact

Priv-Links is a free, non-commercial personal project run by Nicolas. For service, privacy, or data-rights questions, email NicolasUnica@proton.me.

2. What the service does

Priv-Links groups up to twenty URLs in one temporary link. Each link expires after 1, 2, 5, or 10 days, as selected by its creator. Links can be public or password protected. No account, profile, or email address is required to use the service.

3. Responsible use and content

The person who creates a link is responsible for the URLs they add and for having the necessary rights or permissions. The service must not be used to distribute unlawful, fraudulent, harmful, defamatory, or rights-infringing content. Priv-Links does not review URLs in advance. Suspected misuse can be reported using the contact address above.

4. Data processed and purpose

To create and serve links, Priv-Links processes the URLs, optional link name, access mode, and expiry date. For password-protected links, only a cryptographic password hash is stored, never the readable password itself.

IP addresses are processed temporarily to prevent abuse. The application stores a one-way IP hash and failed unlock attempts to apply security limits and protect links. It does not sell data, use advertising, create user profiles, or make automated decisions with legal or similarly significant effects.

To understand and improve the service, Priv-Links keeps private daily totals of link creation, authorized content deliveries, revocations, operation outcomes and response times. It also counts a limited set of interface actions, such as starting a form, requesting creation, waiting for a security challenge, displaying a result, copying a link or owner code, and clicking to open a destination. Only the action category is sent for these interface statistics: no form values, destination URLs, passwords, owner codes, link tokens or visitor identifiers are included. Security identifiers are not used to correlate these statistics. These totals are available only through administrative database access and do not identify unique people.

Processing is based on the legitimate interest in providing the requested service and protecting it from abuse and unauthorized access, and in improving its usability through limited aggregate measurements without user profiles. Do not include particularly sensitive information in URLs.

5. Retention

Links, their URLs, and any password hash are deleted by a daily process within 48 hours after expiry. Access-attempt records are normally deleted within 8 days, including the daily cleanup interval. Security rate-limit records are normally deleted within 2 days through scheduled cleanup. Cleanup may be delayed during an infrastructure outage.

Daily usage statistics retain the current UTC day and the previous 89 days. A daily process deletes older aggregates; deletion can take up to one additional day or be delayed during an infrastructure outage. No historical visitor profiles or individual action histories are kept.

6. Service providers

Cloudflare provides delivery and security infrastructure, and Supabase provides the database. They act as technical providers needed to operate and protect Priv-Links. Their services may involve processing outside the European Economic Area under their applicable safeguards and privacy documentation.

7. Your rights

You can request access, correction, erasure, restriction, or objection to the processing of your data by emailing the contact address above. You may also lodge a complaint with the competent data protection authority; in Spain, this is the Spanish Data Protection Agency.

8. Cookies

Priv-Links does not use first-party analytics, advertising, or tracking cookies, and it does not use local storage to profile users. The infrastructure may use strictly necessary technical measures to provide and protect the service. If non-essential cookies are added in the future, users will be informed and consent will be requested where required.

9. Security and limits

The service uses HTTPS, security headers, database access controls, and IP-based limits to reduce abuse. Password-protected links are not end-to-end encrypted: the service stores URLs so that it can display them after authorized access. No online service can guarantee absolute security.

10. Changes and availability

This project may be changed, suspended, or discontinued. If this notice changes, the new version will be published on this page. Continued use of the service means acceptance of the current terms.