Privacy notice

Updated 2 November 2026. Leaplink provides deep links, creator bio pages, analytics and destination control checks. The hosted app stores account and product data in a Cloudflare-backed database. A local installation stores its data on the computer running that installation.

Account and page data

Leaplink stores your name, email, a salted password hash, session records, saved links, bio-page content, uploaded public-page images, link-check results, destination proof codes and review records, and partnership confirmations. Your password is never stored as plain text. The sign-in cookie is used to maintain your account session.

Link analytics

When a shared link or published bio page is opened, Leaplink records the resource, event time, device category, referring hostname, and country if supplied by the network. Bio pages also measure per-link activity, browser and operating system, active time and scroll depth using a random visit token. The token does not identify a visitor across pages. Leaplink does not store the visitor's full IP address or a tracking fingerprint. Recognized bots are excluded.

External destinations

Destination verification contacts public DNS and the target website. Opening a destination takes the visitor to that website or app, where its own privacy policies apply.

Private business integrations

The owner-only test workspace can store authorized Cellxpert reporting and Instagram profile, post and comment data. Connection credentials are encrypted before storage and are not returned to the browser after saving. Connected data is used for this private workspace and is not published on bio pages. Refreshes are requested manually. Removing a source deletes its saved credentials and snapshot from the active workspace; deleting the account also removes its private integration records.

Optional advertising measurement

If a creator configures a Meta pixel on a deep link, its landing page offers a separate choice before sending ad measurement to Meta. Visitors can continue with that choice unchecked. Embedded YouTube and Spotify players load when a visitor chooses to load the player, and those services then apply their own policies.

Payments

Paddle processes subscription payments as merchant of record. Payment details are entered in Paddle’s secure checkout; Leaplink does not store full card details. We store Paddle transaction and customer references, subscription status, billing periods and the plan required to provide paid features. Paddle processes payment information under its privacy policy. Billing records needed for payment reconciliation or legal obligations may be retained after workspace deletion.

Your controls

You can edit or delete links and bio pages in the dashboard. Deleting an account from Settings removes its sessions, content and associated analytics from the application database. Local and hosted accounts are separate. For privacy, account or product requests, contact leaplink2026@gmail.com. Email-based password recovery is not currently available; signed-in users can change their password in Settings.