Privacy Policy

Effective from 03/09/2026 · Applies to lnk1s.com

This Policy explains how lnk1s.com ("we") collects, uses, stores, and protects your personal data when you use the Service, in accordance with Decree No. 13/2023/ND-CP on Personal Data Protection, the 2018 Cybersecurity Law, and the 2023 Law on Electronic Transactions of Vietnam.

1. Personal Data We Collect

Data type	When collected
Email, display name, password (hashed with bcrypt, never stored in plain text)	When you register an account
IP address	Each time you create a shortened link (used for spam/abuse and daily rate limiting)
Destination URL, QR code, destination page title	When you create a shortened link
"Link history" cookie (stored in your browser; not stored server-side if you are not logged in)	When you create a link on the homepage
Language cookie, login session cookie	While using the website

We do not intentionally collect sensitive personal data (as defined in Article 2.4 of Decree 13/2023/ND-CP) such as religion, health, biometric, or financial data.

2. Purpose and Legal Basis

Providing, operating, and maintaining the Service (creating/managing links, account login);
Security: detecting and blocking phishing/malicious links via AI checks and domain/keyword lists;
Abuse prevention: limiting the number of links created per IP per day;
Complying with lawful requests from competent state authorities, following due legal process.

Processing is based on your consent when registering an account/using the Service (Article 11 of Decree 13/2023/ND-CP) and/or our legal compliance obligations.

3. Sharing with Third Parties

To operate the Service, we use certain third-party providers, which may host servers outside Vietnam:

OpenAI (URL safety-check API): only the URL being checked is sent, never your personally identifying information (email, IP, etc.);
Google (Analytics, favicon service): collects anonymized traffic data for statistics;
QR Server API: generates QR codes from your shortened link (public data, contains no personal information).

We do not sell or trade your personal data to third parties for commercial purposes. Any cross-border transfer is limited to the minimum necessary to operate the services listed above.

4. Data Retention

Account data is retained for as long as the account remains active. History/language cookies persist in your browser for up to 30 days. You may request deletion of your data at any time as described in Section 6 below.

5. Data Security

Passwords are hashed using bcrypt and never stored in plain text. Connections between your browser and our server are encrypted via HTTPS. The admin area is role-restricted (admin/user) and protected against cross-site request forgery (CSRF).

6. Your Rights

Under Decree 13/2023/ND-CP, you have the following rights over your personal data:

The right to be informed about the processing of your personal data;
The right to consent or refuse consent to processing;
The right to access, view, and correct your personal data;
The right to withdraw consent previously given;
The right to request deletion of your personal data (except where otherwise required by law);
The right to restrict processing and to object to processing;
The right to lodge complaints, denunciations, or lawsuits as provided by law;
The right to claim damages in case of violations.

To exercise these rights, please contact us using the details in Section 9. You may also lodge a complaint with the competent personal data protection authority (Ministry of Public Security) as provided by law.

7. Children's Data

The Service is not directed to, and is not intended for, users under 16 years of age. If we become aware that we have collected data from a child under 16 without valid parental or guardian consent, we will delete such data promptly upon notice, in accordance with Article 20 of Decree 13/2023/ND-CP.

8. Changes to This Policy

This Policy may be updated from time to time to reflect feature or legal changes. The latest version is always posted on this page with its effective date.

9. Contact

For any request regarding your personal data or questions about this Policy, contact: support@lnk1s.com