Third-party processors we share data with

We rely on the following processors to operate the service. Each one only receives the minimum data needed for its role.

• Supabase — managed PostgreSQL database, authentication, and file storage. Hosts your account, profile, links, gallery, QR codes, and analytics events.
• Sentry — application error and performance monitoring. Receives stack traces, request URLs, and limited diagnostic metadata when something fails so we can fix it.
• Google Analytics 4 — aggregated product analytics. Off by default: it loads only after you turn it on in the cookie banner or in Settings, and it never runs on public profile, business card, or QR pages. You can revoke it at any time.
• Cloudflare Turnstile — bot protection on sign-in and sign-up forms. Sees the form interaction signals needed to issue a verification token.

Visitor analytics on public profiles

When someone opens a public Linkhiver profile we record the visit so the profile owner can see view and click counts. These records are cookieless — we store nothing on the visitor's device and no identifier for them, only the event type, the link tapped, the referring site, a coarse device category, and a country derived from the network request. We rely on legitimate interest for this, and any visitor can switch it off under Cookie preferences.

Your rights

You can request a copy of your data (right to data portability) or permanently delete your account from Settings → Danger zone. Both actions also remove related links, gallery items, QR codes, and analytics rows.