Privacy Policy

We collect information in these categories:

• Account data — email address and authentication identifiers via Supabase Auth when you sign up or log in.
• Product data — videos you tag, tracked links you create, short URLs, placements, and click events generated through your account.
• Click metadata — timestamp, referrer, approximate country (resolved from IP address via a GeoIP lookup), device type (from user agent), and which link or video placement was clicked. We do not store the raw IP address itself.
• Billing data — subscription status, plan, and your customer identifier with Stripe or Polar (whichever processor you were billed through). Payment card details are processed by Stripe/Polar directly and are not stored by us.
• Channel scan data — YouTube URLs you submit on the marketing homepage and public channel or video metadata retrieved from the YouTube Data API.

We use collected information to:

• Provide click attribution, analytics, and short-link redirect services.
• Authenticate users and maintain account security.
• Process subscriptions and enforce plan limits.
• Improve product performance, reliability, and user experience.
• Detect abuse, fraud, and violations of our Terms of Service.
• Respond to support requests and legal obligations.

We do not sell your personal information.

Where required by law (such as GDPR), we process personal data based on contract performance (providing the Service), legitimate interests (security and product improvement), and your consent where applicable. You may withdraw consent for optional communications at any time by contacting us.

We rely on trusted processors to operate GoloLink, including:

• Supabase — authentication and database hosting
• Stripe and Polar — payment processing
• DigitalOcean App Platform — application hosting
• Upstash — Redis caching and rate limiting
• MaxMind — GeoIP country lookup for click analytics
• Google — YouTube Data API (public channel scan on the homepage), Google Sign-In, and Google Analytics (if enabled)

Each provider has its own privacy policy governing how they handle data. We share only what is necessary for them to perform their services.

We use a small number of cookies:

• Essential — a session cookie set by Supabase Auth to keep you signed in. Required for the Service to work; cannot be disabled.
• Analytics — if Google Analytics is enabled, it sets cookies to measure site usage. These are not essential and are only present on deployments where analytics is configured.

We do not use advertising or cross-site tracking cookies.

We retain account and click data while your account is active. You may delete links, videos, and placements within the app. If you request account deletion, we will remove or anonymize your personal data within a reasonable period, except where retention is required by law or for legitimate business purposes such as billing records.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability where applicable

To exercise these rights, contact us using the information below. California residents may have additional rights under the CCPA.

We use industry-standard measures to protect data in transit and at rest, including encrypted connections and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

Privacy questions or data requests? Email us at support@gololink.com or use our contact form.