Privacy Policy
At walinks.co we take your privacy seriously. This policy explains what data we collect and how we use it.
Table of contents
01 Information We Collect
Anonymous use (free plan, no account)
We do not collect or store personal information. Links created anonymously are not associated with any identity.
Registered users
- Email address
- Name (optional)
- Account creation date
Click analytics (Pro plan)
- Click count per link
- SHA-256 hashed IP (raw IP is never stored)
- Device type (mobile / desktop)
- Country or region (derived from IP, not stored raw)
- Referrer URL
Payment data
Payments are processed entirely by Stripe. We do not store card numbers or sensitive financial data. We only receive subscription status and the Stripe customer ID.
02 How We Use Your Information
We use collected information to:
- Provide and improve the Service
- Process payments and manage subscriptions
- Show you click analytics for your links
- Send transactional emails (account confirmation, payment receipts)
- Detect and prevent fraud or misuse
- Comply with legal obligations
We do not use your information for advertising or share it with third parties for marketing purposes.
03 Data Sharing
We do not sell your personal information. We only share data with the following providers necessary to operate the Service:
- Stripe — payment processing (stripe.com/privacy)
- Hosting provider — cloud server infrastructure
- Cloudflare — CDN & DNS (cloudflare.com/privacypolicy)
We may share information if required by law or a valid court order.
04 Cookies & Local Storage
We use session cookies solely for user authentication. We do not use third-party tracking or advertising cookies.
Browser localStorage is used to remember your language preference and the app install banner state. This information is never sent to our servers.
05 Data Retention
- Account data: retained while account is active; deleted 30 days after account deletion request.
- Click analytics: retained for 12 months.
- Payment data: managed by Stripe per their retention policy.
- Server logs: retained for 7 days for operational security.
06 Security
We implement industry-standard security measures:
- HTTPS/TLS encryption on all communications
- Passwords hashed with bcrypt (never stored in plain text)
- IPs hashed with SHA-256 for analytics (not reversible)
- Database access restricted to local network
- Active firewall and fail2ban on server
No system is completely secure. We recommend using a unique, strong password for your account.
07 Third-Party Services
walinks.co generates links that point to WhatsApp (owned by Meta Platforms, Inc.). Once a user clicks a walinks.co link and opens WhatsApp, data processing is subject to WhatsApp's Privacy Policy.
walinks.co has no control over data processed by WhatsApp or Meta Platforms, Inc.
08 Your Rights
Depending on your location, you may have the following rights over your personal data:
- Access: request a copy of the data we hold about you
- Rectification: correct inaccurate data
- Deletion: request deletion of your account and associated data
- Portability: receive your data in a structured format
- Objection: object to certain types of processing
To exercise any of these rights, write to privacy@walinks.co. We will respond within 30 days.
09 Children
The Service is not directed to children under 13. We do not knowingly collect personal information from children. If we discover that a minor has created an account, we will delete it immediately.
10 Changes to this Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email (if you have an account) or through a prominent notice on the Service.
The date of the last update is shown at the top of this page.
11 Contact
If you have questions or requests about this Privacy Policy: