Privacy policy

2. Overview of data processing

We only collect and process personal data to the extent necessary for providing and improving our service. This primarily concerns:

• Technical access data when visiting the website (server log files)
• Account data during registration (email address, name when using Google OAuth)
• Usage data for anonymous web analytics (no cookies, no personal data)

Processing is based on the following legal grounds:

• Art. 6(1)(a) GDPR — Consent
• Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR — Legitimate interest (e.g. stable website operation, anonymous usage statistics)

3. Hosting

This website is hosted by Netlify Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA.

When you visit our website, Netlify automatically collects technical access data in server log files, including your IP address, browser type and version, and the date and time of access.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure website operation).

Third-country transfer: USA. The transfer is based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses. Netlify offers a Data Processing Agreement (DPA).

4. Web analytics with Plausible Analytics

We use Plausible Analytics, a privacy-friendly analytics service by Plausible Insights OÜ, Västriku tn 2, Tartu 50403, Estonia.

Plausible collects no personal data, sets no cookies, and does not access your device. Only anonymous, aggregated usage statistics are collected (e.g. page views, referral sources).

Server location: Falkenstein, Germany (Hetzner).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving our service). Since no personal data is processed, consent is not required.

A data processing agreement is in place through acceptance of the Plausible Terms of Service. More information: plausible.io/data-policy

5. Registration and account

Using LinkChaser requires registration. Authentication is provided by Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992.

Email registration

When registering via email, we process your email address and a hashed password. Your password is never stored in plain text.

Google OAuth

When registering via Google OAuth, we receive the following data from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Google LLC (USA): email address, name, and profile picture. For more information, see Google's privacy policy.

Purpose: Creating and managing your account, authentication.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Retention period: Until you delete your account.

Third-country transfer: Potentially USA (Supabase, Google). Basis: EU Standard Contractual Clauses.

6. Email delivery

For sending transactional emails (e.g. registration confirmation, password reset) we use Resend Inc., 2261 Market Street #4913, San Francisco, CA 94114, USA.

Data processed: Your email address.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract — these emails are necessary for using the service).

Third-country transfer: USA. Basis: EU Standard Contractual Clauses.

7. Cookies and local storage

LinkChaser uses no marketing or tracking cookies. Plausible Analytics operates entirely without cookies.

We only use technically necessary storage:

• Auth session token (cookie) — for authentication via Supabase
• Privacy notice status (localStorage) — stores whether you have dismissed the privacy notice

Legal basis: §25(2) TDDDG (strictly necessary technical storage). No consent is required for this.

8. Your rights

You have the following rights regarding your personal data at any time:

• Access (Art. 15 GDPR) — What data we have stored about you
• Rectification (Art. 16 GDPR) — Correction of inaccurate data
• Erasure (Art. 17 GDPR) — Deletion of your data, provided no statutory retention obligations apply
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR) — Receive your data in a common format
• Objection (Art. 21 GDPR) — Against processing based on Art. 6(1)(f) GDPR
• Withdrawal of consent (Art. 7(3) GDPR) — At any time with effect for the future

To exercise your rights, send an email to info@linkchaser.com.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The responsible authority is:

Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern
Werderstraße 74a
19055 Schwerin, Germany

9. Updates and changes

This privacy policy may be updated when the service or legal requirements change. The current version is always available on this page.

Last updated: March 2026