privacy

Privacy

Last updated 6 October 2026.

What we store

Your email address, a hash of each API key, a record of each link you digest (the URL, the time and the credits it cost), and the resulting digest text. Digest text is cached for about 30 days. Your usage history is kept until you ask us to delete it. We also keep the name of the site you first arrived from (for example “google.com”), and, if you pay, the customer reference Stripe gives us.

What we do not store

Videos, images, and audio. These are written to a temporary directory while a digest is produced and deleted before the request returns. We do not keep, serve, or redistribute the media behind any link.

Links waiting for a platform

When a platform refuses to let us read a link you asked for (Douyin, since 9 October 2026), we keep that link with your account’s email for up to seven days, read it once the platform allows it, and email you the result. The waiting entry is deleted within two days after that.

API keys

Only an HMAC hash of each key is stored. We cannot show you a key again after it is created, and a database leak would not reveal usable keys.

Digests are shared

Digests are cached by link, and a cached digest may be served to another user who requests the same public link. Do not send links to private or access-controlled content.

Third parties

To read a link we fetch the post from the platform it is on, sometimes through a proxy provider, and send its content (text, images, video frames and audio) to model providers through OpenRouter. Payments are handled by Stripe, who receive your email and payment details — we never see card numbers. If you sign in with Google, Google tells us your email address. Email is sent through Resend. Infrastructure runs on AWS, whose access logs include IP addresses.

Analytics, cookies and IP addresses

No third-party analytics scripts, no advertising pixels, no third-party cookies. We count page views and product events ourselves: the page path, the host name of the referring site and the first-arrival label, with no visitor identifier and no link to an account, kept for 180 days. Cookies we set: one that keeps you signed in; one that remembers the site you first arrived from; one that lets a visitor without an account try a few reads; and two short-lived ones used while you sign in (10 to 15 minutes). IP addresses are used to limit request rates and are kept for a few hours for that purpose.

Deletion

Email privacy@linkdigest.dev and we will delete your account, keys, and usage history. Cached digests of public links are not personal data and remain.