Privacy Policy

Last updated: June 24, 2025

🔒 Hey there! Privacy is at the heart of everything we do at Lynko. This policy explains how we handle your data (spoiler: we collect as little as possible and never track you personally). Let's keep it simple and transparent!

1. What is This About?

This Privacy Policy explains how Lynko collects, uses, and protects your information when you use our URL shortening service. We believe in privacy by design – meaning we built Lynko to be private from the ground up.

🎯 TL;DR: We don't track you personally, we don't sell your data, and we collect only what's absolutely necessary to make the service work. That's it!

2. Who's Responsible?

Lynko is the data controller responsible for processing any data collected through this service. Lynko is operated from Italy 🇮🇹 and follows EU privacy standards (GDPR).

You can contact us at: privacy@lynko.it

3. What Data We Collect

We collect minimal data to make Lynko work properly:

📊 Anonymous Statistics

  • Click counts – How many times a link was clicked
  • General location – Country/region (not your exact location)
  • Device type – Mobile, desktop, tablet (not specific device info)
  • Referrer domain – The domain name the click came from (e.g., example.com), not the full URL

🔗 Technical Data

  • Original URLs – The links you want to shorten
  • Short codes – The random codes we generate
  • Creation timestamp – When the link was created

📬 Early Access Email

If you sign up for early access, we collect your email address to let you know when registrations open.

⚠️ What we don't collect:

  • Your IP address
  • Personal identifiers (like name, email, or ID numbers from usage)
  • Browsing history
  • Anything that could directly identify you through the use of the service

We do our best to keep this data anonymous, but some technical data (like referrers or URLs) could potentially be considered personal data under GDPR if combined with other sources. Just to be safe, we treat all data with care.

4. How We Use Your Data

We use the data we collect to:

  • 🔧 Make the service work – Redirect your short links to the right places
  • 📈 Show anonymous stats – Help you understand how your links perform
  • 🛡️ Keep things secure – Detect and prevent abuse
  • 🚀 Improve Lynko – Make the service better over time
  • 📬 Notify you about registration – If you've joined the early access list

🧾 Legal basis: We rely on our legitimate interest in providing and improving the service, and your consent where required (e.g., for cookies).

For each of these purposes, we only collect what's necessary, and we've conducted internal assessments to ensure our use is proportionate and respectful of your privacy rights.

We never sell your data, share it with advertisers, or use it for marketing purposes.

5. Link Safety & Verification

To keep everyone safe, we check links using Google Safe Browsing and Google Web Risk services. This means:

  • URLs are sent to Google for safety verification
  • This helps us block malicious or dangerous links
  • Google may log these requests according to their own privacy policy

This is a trade-off we make to keep the service safe for everyone.

6. Cookies & Tracking

We use minimal cookies and tracking:

  • 🍪 Essential cookies – Only what's needed for the site to work
  • 📊 Simple Analytics – Privacy-first analytics (no personal tracking)
  • 🔒 Cookie consent – To comply with privacy laws

No advertising cookies, no social media trackers, no creepy stuff. Promise! 🤝

7. Data Storage & Retention

Your data is stored securely using:

  • 🏗️ AWS Infrastructure – Industry-standard security
  • 🔐 Encryption – Data encrypted in transit and at rest
  • 🌍 EU-hosted servers – Data is stored in Ireland (AWS eu-west-1 region)

⏰ Retention

  • Shortened links are stored until they expire (via TTL) or are deleted by the user
  • Early access emails are stored until we notify you or you ask for deletion
  • In the future, if you create an account, your data will be stored until you delete your account

In some cases, data may be processed by third-party providers located outside the EU. When this happens, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and Transfer Impact Assessments (TIAs), in line with GDPR requirements post-Schrems II.

8. Your Rights (GDPR)

Even if we don't collect traditional personal data, the GDPR grants you certain rights over data that could potentially identify you. These include:

  • 📄 Right to access – You can request to see what data we have (if any)
  • 📝 Right to rectification – You can request corrections to inaccurate data
  • 🗑️ Right to erasure – You can ask us to delete specific links or your early access email
  • ⏸️ Right to restrict processing – You can ask us to limit how we use your data
  • 🔄 Right to data portability – In applicable cases, receive data in a structured format
  • ❌ Right to object – You can object to our use of data under legitimate interest

To exercise any of these rights, just email privacy@lynko.it. We'll respond as soon as possible – usually within 30 days.

9. Accountability & Data Protection Practices

We take data protection seriously. We maintain internal records of our data processing activities, perform privacy impact assessments where needed, and have procedures in place for notifying users and authorities of data breaches within 72 hours, as required by GDPR.

We don't currently appoint a DPO, but you can always reach our privacy team at privacy@lynko.it for any questions.

10. Changes to This Policy

If we need to update this policy, we'll:

  • 📢 Post a clear notice on the website
  • 📅 Update the "last modified" date
  • 📧 Email registered users about major changes

We won't make sneaky changes or reduce your privacy protections without telling you.

11. Contact Us

Questions about privacy? We're here to help! 💬

Email: privacy@lynko.it
General: info@lynko.it