Privacy policy

Last updated 5 November 2026.

This policy explains what personal data LinkRot handles, why, and who helps us do it. The controller is Netbase Media Ltd. (Netbase Media Kft.), 2141 Csömör, Nagy Sándor str. 46., Hungary, EU VAT number HU24994356. Contact for anything about your data: [email protected].

The short version

We keep what the product needs: your email address, your link list and the results of the checks.
No advertising, no analytics scripts, no tracking cookies. We do not sell or publish your data.
Card details stay with Stripe. We never see them.
You can ask for a copy or for deletion at any time.

1. What we collect and why

Free link check

The addresses you submit are fetched once and the result is shown to you. The addresses are not stored. To limit abuse and to count how the tool is used, we log each check: a salted hash of the IP address, the time, how many pages were checked and how many fell under each verdict. The log is kept for 90 days. Legal basis: our legitimate interest in protecting the service.

Account

Your email address, the currency, time zone and notification settings you choose, your plan and its dates, and when you signed in. We need these to provide the service you bought (performance of a contract).

Your links

The pages and target addresses you add, the prices, dates, anchors and notes you enter, and what our checks found. This is business data, but it can contain personal data if you put any into it, for example a seller's name in a note. It is used only to run your account.

Payments

Stripe processes the payment and gives us your name, email address, billing address, tax ID if you entered one, what you bought and the payment status. We never receive your card number. We keep invoices and payment records for 8 years, as Hungarian accounting law requires.

Emails we send

Sign-in links, alerts, the digest and messages about your plan or about changes to the terms go to your account address. Our email provider tells us whether a message was delivered or bounced. Alerts and the digest can be changed or reduced on your Profile page. We do not send marketing email unless you asked for it, and every such email has an unsubscribe link.

Bulk import

When you paste text or upload a file to import links, the text is sent to Anthropic (Claude API) to be read into rows. We do not keep the pasted text; only the rows you confirm are saved. Do not paste anything you do not want processed this way.

Page checks and Google lookups

To check a link we request the page from its website, which sees our server and the LinkRotBot user agent, not you. For the monthly Google lookup we send the page address to a search data provider. Neither contains information about you.

Server logs

Like every website, our servers and Cloudflare record requests: IP address, time, the page requested and the browser. We use these to keep the service secure and to find faults, and keep them for up to 60 days. Legal basis: legitimate interest.

When you write to us

We keep the emails you send to [email protected] for as long as it takes to deal with them and for a reasonable time afterwards.

2. Cookies and browser storage

app.linkrot.io sets one cookie, lr_session, that keeps you signed in for up to 30 days. It is necessary for the service, so it needs no consent. The site also remembers a few interface choices in your browser's local storage; they never leave your device. Cloudflare, which protects the site, may set a short-lived security cookie. There are no advertising or analytics cookies and no third-party scripts or fonts.

3. Who helps us

We share data only with the providers that run parts of the service for us, each under a data processing agreement:

Hetzner Online (Germany): servers and database.
Cloudflare (USA, with a global network): network security, content delivery and routing of our incoming email.
Amazon Web Services (Simple Email Service, Frankfurt region): sending email.
Stripe (Ireland and USA): payments, invoices and the billing portal.
Anthropic (USA): reading pasted import text into rows.
DataForSEO: search results for the Google lookup. Receives page addresses only.
Google (Ireland and USA): the mailbox where we read messages sent to [email protected].

Some of these providers process data outside the European Economic Area. Where they do, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

We do not sell personal data and we do not share it for advertising. We disclose data to authorities only when the law requires it. If LinkRot is transferred to another company, your data moves with the service under this policy, and we will tell you beforehand.

4. How long we keep data

Account, links and check history: while you have an account. After a plan ends they are kept so you can come back, until you ask for deletion; accounts with no active plan for 24 months may be deleted after we write to the account address.
After a deletion request: removed from the live systems within 30 days and from backups within a further 60 days.
Sign-in links: valid for 15 minutes, deleted a day after they expire.
Free-check log: 90 days.
Server logs: up to 60 days.
Invoices and payment records: 8 years.

5. Security

Connections are encrypted, there are no passwords to steal because sign-in uses one-time links, every account's data is separated from the others, and access to the servers is limited to the people who run the service. No system is perfectly secure; if a breach affects your data, we will tell you and the authority as the law requires.

6. Your rights

Under the GDPR you can ask us for access to your data, a copy of it, correction, deletion, or restriction of its use, and you can object to processing that is based on our legitimate interest. Write to [email protected] from your account address and we will answer within one month. There is no automated decision-making about you and no profiling.

You can complain to the data protection authority of your country, or to the Hungarian authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), naih.hu.

7. Children

LinkRot is a business tool and is not meant for anyone under 18.

8. Changes

If we change how we handle personal data, we update this page and its date, and we email account holders about changes that matter before they take effect.

LinkRot · Terms · Privacy · LinkRotBot