Privacy Policy

Linkdown(the “Service”) is operated by Linkdown (the “Company”, “we”, “us”). The Service is hosted at lnkdwn.com. Contact: privacy@0451software.com.

We collect the minimum data needed to operate the Service:

• Account data (email address, name, profile picture) — provided by Clerk, our auth provider. We never see your password.
• Billing data (Stripe customer ID, subscription tier, billing period end, payment status) — provided by Stripe via webhooks. We never see your card number.
• Decks (HTML / Markdown / PDF files you upload) — stored in Cloudflare R2 under your account.
• Share links (URL token, optional password hash, optional view count, optional expiry) — stored in our database.
• Operational logs (request path, response status, latency, approximate IP for rate-limit / abuse detection) — retained 30 days in Cloudflare Workers Logs (Logpush to R2).
• Error reports (stack trace, request context) — sent to Sentry when the Service crashes. PII is scrubbed (we do not log emails, Clerk user IDs, or IP addresses in error reports).

• No advertising trackers.
• No third-party analytics on the dashboard (Clerk / Stripe are the only third-party scripts; Plausible is on the marketing site only and is cookieless).
• No “fingerprinting” or device characteristics beyond what your browser sends in the standard User-Agent header.
• No sale of personal data. We are not a data broker.

We use the data we collect solely to operate the Service:

• Authenticate you (account data, via Clerk).
• Charge you and manage your subscription (billing data, via Stripe).
• Store and serve your decks (deck data, via R2).
• Generate and resolve share links (share-link data, our database).
• Detect abuse and rate-limit bad actors (operational logs).
• Diagnose crashes (error reports, via Sentry).

We do not train any AI model on your decks. We do not use your decks for advertising. We do not share your decks with anyone other than as required to serve a share link you created.

• Account & billing data: Clerk (US/EU) and Stripe (US). Both are GDPR-compliant data processors with published DPAs.
• Decks: Cloudflare R2 (data stored in the region you upload to; default: US).
• Share-link metadata: Neon Postgres (US).
• Logs: Cloudflare Workers Logs (Logpush to R2; 30-day retention).
• Errors: Sentry (US).

• Decks & share links: until you delete them. Deleting a deck cascades to its share links (404 on the next view).
• Account data:until you delete your account. On account deletion, we delete: your account row, your deck rows, your share-link rows, your R2 deck objects, and your Clerk account. The cascade is triggered by Clerk’s user.deleted webhook and is complete within 60 seconds.
• Operational logs: 30 days. After 30 days, the Logpush retention rule deletes the object from R2.
• Billing data: 7 years (US tax law requires us to keep invoice records).
• Error reports: 90 days in Sentry.

If you are in the EU, UK, or California, you have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data (account deletion covers this).
• Export your data in a machine-readable format (JSON).
• Object to processing (we do not engage in automated decision-making that affects you).
• Withdraw consent at any time (e.g. by deleting your account).
• Lodge a complaint with your data-protection authority.

To exercise any of these rights, email privacy@0451software.com from the email address on your account. We respond within 30 days.

The dashboard uses a single first-party session cookie set by Clerk for authentication. It is HttpOnly, Secure, and SameSite=Lax. We do not use any tracking cookies, advertising cookies, or third-party analytics cookies on the dashboard.

The marketing site (lnkdwn.com) uses Plausible Analytics, which is cookieless (no consent banner required per GDPR Art. 5 / ePrivacy recital 17).

The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has created an account, email privacy@0451software.com and we will delete it.

We will post material changes here at least 14 days before they take effect, with a banner on the dashboard. The “Last updated” date at the top of this page is the source of truth.

Email: privacy@0451software.com
Security issues: security@0451software.com (PGP key on the security.txt page)
DMCA / abuse: abuse@0451software.com (see /legal/dmca)