Privacy Policy

Spokane.Link is run by August SEO, LLC. It records what a link owner needs to see how their links are doing, and very little else. Visitors’ IP addresses aren’t stored with their clicks. Nothing is sold, rented or shared with advertisers.

The rest of this page is the detail, split between account holders (who make links) and visitors (who open them).

We keep:

• Your email address, and the name you gave if you gave one.
• Your password, stored only as a bcrypt hash. We can’t read it back, and neither could anyone who stole the database.
• What you build: links and where they point, bio pages, contact cards, QR codes and uploaded files.
• Settings such as your time zone and plan.

We use this to run your account and to email you about it: confirming your address, password resets and notices about the service.

If you sign in with Google or LinkedIn, that service tells us your name and your verified email address, and we use the address to find your account. We don’t keep their access tokens, post anything, or read your contacts.

When someone opens a short link, file link or bio page, we save:

• The time, and which link it was.
• The operating system, browser and device type (desktop, mobile or tablet), read from the browser’s user-agent string.
• The browser’s language.
• The site they came from, host and path only. No query string.
• Any utm_source, utm_medium or utm_campaign tags in the address.
• Whether that browser has opened the link in the last 24 hours.

IP addresses aren’t stored with clicks. Clicks carried over from the previous Spokane.Link system include an approximate country and city, looked up from the IP address at the time. If we add location to new clicks, it’ll be the same kind of approximate lookup, and the IP address still won’t be kept with it.

The link’s owner sees all of this as totals and charts in their dashboard.

Some bio pages have a form. Whatever you type into it goes to the owner of that page, who reads it in their dashboard. Alongside it we store a one-way hash of your IP address, your browser’s user-agent and the referring site, which is how spam and duplicate submissions get blocked.

The page owner decides what happens to your submission after that, so ask them to change or delete it.

Our web server keeps standard access logs (IP address, time, the address requested, the browser) for security and troubleshooting. They’re deleted after 14 days. Sign-in attempts are rate-limited by IP address and email for a short window, which slows down password guessing.

• A sign-in cookie on app.spokane.link keeps you logged in, for up to 30 days.
• A click cookie, set per link for 24 hours, so a repeat click isn’t counted as a new visitor.
• Your light or dark mode choice, kept in your browser’s local storage.

None of them are for advertising, and no page we serve carries ad networks or third-party analytics.

Two companies host Spokane.Link for us, and process data only to do that:

• DigitalOcean runs the servers and the database.
• Amazon Web Services stores uploaded files (S3) and sends account email (SES).

A bio page with a video embeds YouTube’s privacy-enhanced player or Vimeo’s player, and those follow their own privacy policies.

Everything is stored in the United States. We only hand information to law enforcement when the law requires it.

Account data and your links’ clicks are kept while your account is open. The Free plan shows the last 30 days in the dashboard, but the records behind it stay, so a paid plan shows up to a year of history.

Delete your account under Settings and its data goes at once. The files behind your file links follow within 30 days, and database backups that still hold a copy expire on their own shortly after.

You can delete your account yourself under Settings. For a copy of your data, or to correct something you can’t change yourself, email mail@spokane.link from your account’s address. We answer within 30 days, usually much sooner. Depending on where you live, local law may give you more rights than these, and we’ll handle those requests the same way.

If you only ever clicked a link, there’s usually nothing to find. Clicks aren’t tied to a name or an IP address.

Spokane.Link isn’t for children under 13, and we don’t knowingly collect their information. If you believe a child has an account, tell us and we’ll delete it.

When this policy changes, the date at the top changes too. Account holders get an email before anything significant takes effect. Questions go to mail@spokane.link.