walinks Privacy Standard
We designed walinks from day one to minimize data collection. When someone clicks a walinks short link (walinks.online or walinks.pro), we believe their private data should stay private.
1. Zero Raw IP Address Storage
walinks strictly does not persist raw visitor IP addresses in our databases or system logs. To count unique visitors accurately without violating user privacy, we run a daily keyed one-way hash:
This hash irreversibly resets every 24 hours at midnight UTC. It is mathematically impossible to reconstruct a visitor's real IP address from this identifier.
2. Data We Process & Sub-Processors
To provide our service, we integrate with industry-leading infrastructure providers under strict Data Processing Agreements (DPAs):
| Sub-Processor | Role / Purpose | Data Handled | Jurisdiction |
|---|---|---|---|
| Stripe, Inc. | Merchant of Record & Payments | Billing details, email, card tokens | United States / Global |
| Neon / PostgreSQL | Managed Primary Database | Account credentials, routing rules, link slugs | US / EU |
| Resend, Inc. | Transactional Email Delivery | Account notification email, password reset tokens | United States |
| Vercel Inc. / Edge Network | Edge Compute & HTTP Routing | Transient HTTP headers for 302 redirection | Global Edge |
3. Cookies & Session Storage
walinks uses essential security and authentication cookies only (walinks_session). We do not place advertising tracking cookies or third-party pixel trackers on our dashboard.
4. Account Deletion & Right to be Forgotten
You can permanently delete your workspace and all associated links, click metrics, and member profiles at any time via Workspace Settings. Once confirmed, all database rows are permanently purged immediately.
5. Contact Our Privacy Officer
Questions regarding data processing or privacy requests can be addressed directly to our team at privacy@walinks.online.