Privacy Policy
We are committed to protecting your personal data. This policy explains what data we collect, how we use it, and how we keep it safe.
Last Updated: April 16, 2026
1. Introduction
Welcome to Linkboo ("we," "us," or "our"), accessible at linkboo.app. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform. Linkboo is a social link curation and sharing platform where users can organize links into collections, share profiles, rate and review content, and discover new resources.
By accessing or using Linkboo, you agree to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our services.
2. Information We Collect
2.1 Account Information
When you create an account or sign up for Linkboo, we collect the following information:
- Name / Display Name — used to personalize your profile.
- Email Address — used for authentication, account recovery, and communications.
- Password — stored in a securely hashed format; never stored in plain text.
- Third-Party Authentication Data — if you sign in via Google, GitHub, or other OAuth providers, we receive your name, email, and profile picture from those services.
2.2 User-Generated Content
As part of using Linkboo, you may create and share the following content:
- Links and Collections — URLs, titles, descriptions, and organizational structures you create.
- Ratings & Reviews — star ratings and text reviews you submit on links or collections.
- Profile Information — bio, avatar, and any customizations you make to your link-in-bio page.
2.3 Usage Data
We automatically collect certain information about your interaction with the platform:
- Click Statistics — which links you click and how often.
- Discover/Trending History — pages and content you browse in the Discover section.
- Device & Browser Information — IP address, browser type, operating system, and device identifiers.
- Log Data — access times, pages viewed, and referring URLs.
2.4 Contact Form Data
When you use the contact/feedback form on our website, we collect your name, email address, and message content to respond to your inquiry.
3. How We Use Your Information
We use the information we collect for the following purposes. In accordance with KVKK Article 5 and GDPR Article 6, we indicate the legal basis for each processing activity.
| Purpose | Description | Legal Basis |
|---|---|---|
| Providing Services | Create and maintain your account, display your profile and link-in-bio page, enable curation features | Contract Performance |
| Trending & Discovery | Populate Discover/Trending pages with popular content (only public data) | Legitimate Interest |
| Communications | Password resets, security alerts, service updates. Newsletter is optional (opt-in only). | Contract / Consent |
| Analytics | Understand user interaction, improve features and performance | Legitimate Interest |
| Safety & Moderation | Detect, prevent, and address spam, abuse, fraud, and harmful activities | Legitimate Interest |
| Legal Compliance | Comply with applicable laws, regulations, and legal processes | Legal Obligation |
4. Public, Private & Unlisted Content
⚠️ Important: Please carefully review how your content visibility settings affect data access.
Public Collections
Content marked as "Public" is accessible to anyone on the internet. Public collections may be indexed by search engines (Google, Bing, etc.), displayed on the Discover/Trending pages, and visible in your public profile. You should not include sensitive or personal information in public collections.
Private Collections
Content marked as "Private" is only visible to you. Private collections will not appear in search results, Discover/Trending pages, or be accessible to other users. We are committed to keeping your private data confidential.
Unlisted Collections
Content marked as "Unlisted" is only accessible to those who have the direct link. Unlisted collections will not appear in search results or on the Discover/Trending pages, but anyone with the URL can view them. Share unlisted links only with people you trust.
5. Third-Party Services & Data Sharing
We use trusted third-party service providers to operate and improve Linkboo. Your data may be processed by the following services:
Supabase
Database and authentication services
Vercel
Hosting, deployment, and server logs
Google Analytics
Website traffic and usage analytics
OAuth Providers
Google, GitHub — authentication
✅ We do not sell your personal data to any third parties. Data is shared only with service providers who are essential to operating the platform, and only as necessary for them to perform their services.
6. Cross-Border Data Transfer
🌍 Important (KVKK Madde 9 / GDPR Art. 46): Your data is processed on servers located outside of Turkey.
To provide our services, your personal data is transferred to and processed in countries outside of Turkey and the European Economic Area (EEA), primarily the United States. These countries may not offer the same level of data protection as your home country.
Specifically, your data may be stored and processed by:
Supabase (AWS)
📍 United States / EU
📦 Account data, collections, links, reviews
Vercel
📍 United States (Edge Global)
📦 Server logs, request data
Google (OAuth)
📍 United States
📦 Authentication credentials
GitHub (OAuth)
📍 United States
📦 Authentication credentials
By creating an account and using Linkboo, you explicitly consent to the transfer of your personal data to these countries for the purposes described in this Privacy Policy, in accordance with KVKK Article 9 and GDPR Article 49(1)(a).
We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy. All our third-party providers maintain appropriate security certifications (SOC 2, ISO 27001, etc.) and are bound by their respective privacy policies and data processing agreements.
7. Cookies & Tracking Technologies
Linkboo uses cookies and similar technologies for the following purposes:
| Cookie Type | Purpose | Required |
|---|---|---|
| Authentication | Keeps you signed in and maintains your session | Essential |
| Security | CSRF protection and abuse prevention | Essential |
| Preferences | Saves your theme and display preferences | Functional |
| Analytics | Google Analytics — page views, usage patterns | Optional |
You can manage your cookie preferences in your browser settings. Please note that disabling essential cookies may prevent you from using certain features of the platform.
8. Data Security
We take the security of your data seriously and implement industry-standard measures to protect it:
- All data is transmitted over HTTPS/TLS encrypted connections.
- Passwords are hashed using secure one-way hashing algorithms; they are never stored in plain text.
- Access to production databases and infrastructure is restricted to authorized personnel only.
- We conduct regular security reviews and update dependencies to address known vulnerabilities.
However, no method of transmission or storage over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
9. Your Rights (GDPR / KVKK / CCPA)
Depending on your jurisdiction, you may have the following rights regarding your personal data under applicable data protection laws (including but not limited to the EU General Data Protection Regulation, the Turkish Personal Data Protection Law (KVKK), and the California Consumer Privacy Act):
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request permanent and irreversible deletion of your account and all associated data.
Right to Data Portability
Request an export of your data in a machine-readable format.
Right to Restrict Processing
Request limitation of how we process your personal data.
Right to Object
Object to certain types of data processing, such as direct marketing.
To exercise any of these rights, please contact us at:
emreakisik0@gmail.comWe will make reasonable efforts to respond to your request in a timely manner, typically within 30 days.
10. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will permanently delete your personal data within 30 days, except where we are required to retain certain data for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, dispute resolution).
Aggregated and anonymized data that can no longer identify you may be retained indefinitely for analytical and statistical purposes.
11. Children's Privacy
Linkboo is not intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at emreakisik0@gmail.com and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, through an in-app notification or email.
We encourage you to review this policy periodically to stay informed about how we protect your data.
13. Data Controller & Contact
In accordance with KVKK Article 10 (Aydınlatma Yükümlülüğü), the data controller for your personal data is identified below. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:
Linkboo
Data Controller (Veri Sorumlusu): Emre Akışık
Status: Individual (Gerçek Kişi)
Location: Türkiye
Email: emreakisik0@gmail.com
Website: linkboo.app