1. Scope and current status
This page describes how the current Linkbold implementation processes information when you visit its website, follow a branded link, or use its protected dashboard. It is a launch draft: the operator’s legal identity and verified privacy-contact channel still need to be supplied.
The current dashboard is limited to the authorized account. Public registration and payment collection are not enabled. The product previews contain fictional sample data and do not disclose customer records.
2. Account and link information
When you sign in through ChatGPT, the hosting platform supplies an account identifier and email address. The application uses these to check whether you are authorized to manage the dashboard. Linkbold does not receive or store your ChatGPT password.
For saved links, the application stores the link identifier, custom name, title, complete destination URL, folder, tags, campaign label, and creation time. Destinations may contain affiliate identifiers or tracking parameters that the manager supplies.
3. Information recorded for clicks
When a public branded link is visited, the application records the link identifier, visit date and time, referring website hostname when available, country when supplied by the hosting infrastructure, a device category, campaign/source label, a bot-detection flag, and a pseudonymous visitor identifier.
The visitor identifier is a keyed cryptographic value derived from the request’s IP address and browser user-agent information. The application’s click table stores the resulting identifier rather than the raw IP address or full user-agent string. This is pseudonymization, not a guarantee of anonymity.
Country information is approximate. The application does not request device GPS location. Referring websites may be missing because of browser privacy settings. Known bots are excluded from reports where possible, but bot records can still be stored.
4. How information is used
- Deliver public redirects and preserve the saved affiliate destination.
- Authenticate authorized dashboard access and protect management operations.
- Organize links and calculate click, campaign, referrer, country, and device reports.
- Estimate visitors and identify known automated traffic.
- Produce CSV exports requested by the authorized manager and investigate service issues.
The current application does not implement advertising audiences, sale of click records, or third-party advertising pixels.
5. Providers and third-party websites
OpenAI Sites and its hosting infrastructure, including Cloudflare services, process requests to deliver the site, authentication, storage, security, and HTTPS. Infrastructure providers may process request details and operational logs beyond the application’s own database. Their policies and contractual terms govern their separate processing.
The interface loads fonts from Google Fonts. Font requests can disclose ordinary connection information, including an IP address and browser information, to the font provider.
Following a redirect sends your browser to the destination website. That website receives its own request information and the destination URL’s saved parameters, and may set cookies or perform affiliate tracking. Its own privacy policy applies. Linkbold does not control that processing.
6. Cookies and browser storage
The current click-tracking code does not set a visitor-tracking cookie. The hosting and sign-in providers may use cookies needed for authentication, session management, security, and service delivery. This is not a claim that every underlying provider operates without cookies.
Copy Link uses your browser’s clipboard capability when you activate the button. Exported reports are downloaded to your device; you control their subsequent storage and sharing.
7. Retention and deletion
Saved links and their click records currently remain in the application database until they are deleted. There is no automatic retention-expiry schedule in the current implementation. Selecting a reporting period filters the report; it does not delete older events.
Deleting a link through the authorized dashboard deletes its associated click records from the live application database. Downloaded CSV copies and provider-held logs or backups are separate and are not erased by that action. Their retention may differ.
8. Access, choices, and privacy requests
The authorized manager can edit or delete links and export reports through the dashboard. A visitor’s available privacy rights depend on their location and the laws that apply. Any request may require proportionate verification before information is disclosed or changed.
A verified public contact channel for access, correction, deletion, or other privacy requests must be added before commercial launch. Do not send sensitive documents or payment details through a branded redirect URL.
Pending launch details: legal operator/controller identity, privacy contact, business address, and a documented process for handling privacy requests.
9. Security and international processing
The site uses HTTPS and server-side authorization for management and reports. These measures reduce risk but cannot guarantee that all processing is completely secure.
Hosting, authentication, and font providers may process information in countries other than your own. This draft does not claim a particular data-residency region or certification. Any additional disclosures or transfer arrangements required for a commercial launch must be confirmed by the operator.
10. Children and policy updates
Linkbold is designed as a business link-management tool and is not directed to children under 13. The current application does not implement age verification or parental accounts.
Changes to information collection or use should be reflected here with an updated date. Additional notices or consent mechanisms may be needed if subscriptions, new tracking technologies, or other features are introduced.