Privacy Policy

Last updated: September 29, 2026

Stringalink ("we", "us") runs stringalink.com, a service that lets you create a public page with your links. This policy explains what information we collect, why, and the choices you have. We process personal data in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Information we collect

• Account details: your username and password. Passwords are stored only as a salted, one-way hash, so we can't read them.
• Sign in with Google (optional): if you continue with Google, Google tells us your Google account ID, email address and name. We use the ID to recognise you when you sign in again, the email as your account email, and the name only to fill in your display name when you create your page. We don't get your Google password or access to anything else in your Google account. You can disconnect Google in Settings.
• Email: required when you create an account. We use it only to confirm it's yours and to send account messages such as password reset links. It's never shown on your page.
• Profile content: your display name, bio, profile photo, cover photo, header style, status, theme, text size, and the links, headings and players you add, with their settings and photos (such as schedules, highlights and whether a link is marked as 18+).
• Time zone: when you open your Analytics, your browser tells us your time zone (for example Asia/Manila), so your daily numbers follow your own calendar.
• Technical data: like any website, our hosting provider processes your IP address, browser type and the pages you request, for security and to keep the service running. These logs are kept for a short period. To stop spam sign-ups, we keep a scrambled (hashed) version of the network address an account was created from.

We don't ask for your phone number or payment details, and you don't need to use your real name.

Importing from Linktree: if you use Import from Linktree, we fetch the public Linktree page you give us, once, and show you its links so you can choose which to add. We don't keep a copy of that page.

What is public

Your page at stringalink.com/username is public. Anyone with the link can see your display name, bio, photos and visible links. Links you hide in your dashboard, and scheduled links outside their times, are not shown on your page. If Stringalink verifies your page, a verified badge is shown next to your name. Don't put anything on your page that you want to keep private.

How we use your information

• To create your account, sign you in and show your page.
• To show you analytics about your page (see below).
• To make links work better: when a visitor opens a page inside an app such as Instagram, TikTok or Facebook (we can tell from the browser type), links can open in the visitor's own browser or app.
• To apply a creator's country settings: if a creator hides their page or a link in some countries, we check which country a visit comes from (worked out by our hosting provider from the network address) to decide what to show. We don't store it for this.
• To keep the service safe: we check the website domains in your links against Cloudflare's security and family filters when you save them and again about once a day, to block or hide malware and phishing and to add an 18+ age check to links to adult sites.
• To answer your messages and handle reports.

We don't sell your information, and we don't use it for advertising.

Profile views and analytics

When someone opens a Stringalink page, we count the visit so the page owner can see how many views their page gets. To tell repeat visitors apart, the visitor's browser keeps a random ID in local storage, and we also use a daily fingerprint made from the visitor's network address and browser type (so private browsing windows aren't counted twice). We store only scrambled (hashed) versions of these, never the IP address itself, and delete the daily fingerprints after two days. We also record which country and which website or app a visit came from, as totals only. We also count how many times each link on a page, and each direct link (stringalink.com/username/name), is used, as totals only.

For the page owner's Analytics, these counts are also kept per day: views, visitors, link taps, and views by country, by website or app, and by device type (phone, tablet or computer, worked out from the browser type). To count each visitor once per day, we keep a scrambled (hashed) daily marker that is deleted after two days. Daily numbers are kept for about two years, then deleted. Page owners see only totals, never who visited.

Email sign-ups and your own domain

• Email sign-ups: when a visitor signs up on a creator's page, we store their email address, the country they signed up from and the date, and share them only with that creator (and any agency managing the page). The creator decides how to use them; we act on their behalf. To be removed, contact the creator, or contact us and we'll delete it.
• Your own domain: if you connect a domain, we store it and share it with Cloudflare so it can serve your page securely.

Your plan

We keep a record of your plan (Free, Pro or Max) and when it ends. When payments open, they'll be handled by a payment provider we'll name here first; we won't see or store your full card details.

Agencies

If you accept an agency's request to manage your page (or an agency created your page for you), the members of that agency can see and edit your page, links and settings for your page, and see your page's analytics. They can't see your password or email. When an agency sends you a request, we email you about it if your email is confirmed. If an agency creates a page without the creator's email, the page uses the agency owner's email until the creator adds their own. You can remove an agency's access at any time in Settings. If you run an agency, the creators and team members you add can see your agency's name, and your team can see each other's usernames and roles.

Photos

Photos are resized in your browser before upload, which also removes hidden photo data such as GPS location. This includes photos you add to links. When you replace or remove a photo, or delete a link that has one, we delete the old file.

Embedded videos and music

Creators can add YouTube, Spotify or TikTok players to their page. These players are loaded from those companies, which may collect information about you under their own privacy policies (YouTube players use Google's privacy-enhanced mode). Pages without players don't load anything from them.

Cookies and browser storage

We don't use advertising cookies or third-party trackers. When you sign in, a login token is saved in your browser's local storage so you stay signed in. Signing out removes it. Visitors' browsers also keep the random view-counting ID described above. When a visitor confirms their age on a page with mature content, their browser remembers that answer for the page until the tab is closed (session storage), so the page doesn't ask again each time it's opened. Nothing about the answer is sent to us. Your chosen Analytics period and preview size are remembered in local storage for convenience.

Service providers

Stringalink is hosted on Cloudflare, which provides our servers, database, photo storage and domain name services. Account emails (confirmation and password reset messages) are sent through Resend. Both process data on our behalf and may store it in data centers outside the Philippines. If you sign in with Google, Google handles that step under its own privacy policy. We don't share your information with anyone else unless the law requires it.

How long we keep your data

Your page becomes public once you confirm your email. If an email isn't confirmed within 7 days of sign-up, we delete the account and everything in it (we send reminders first). Otherwise, we keep your account and page for as long as your account exists. You can delete your account at any time from Settings; this permanently deletes your profile, links, photos and all statistics and analytics straight away.

Your rights

You can see and change most of your information in your dashboard at any time. You also have the right to ask for a copy of your data, to correct it, to object to its processing, or to have it deleted. To do any of these, contact us. If you believe we have mishandled your data, you can also file a complaint with the National Privacy Commission of the Philippines.

Children

Stringalink is not meant for children under 13. You must be 18 or older to add or share mature content.

Security

We use HTTPS everywhere, hashed passwords and signed login tokens. No system is perfectly secure, so please use a strong password that you don't use anywhere else.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. For significant changes, we'll let users know on the site.

Contact

For privacy questions or requests, message us on WhatsApp or Viber at +63 916 217 7267, email abuse@stringalink.com, or see our Contact page.