Privacy Policy

Last updated: 2026-08-05 · Linklot is operated from Quebec, Canada. Privacy questions and requests: hi@linklot.app

The short version

Linklot has no accounts and no tracking. Visitors browse and message anonymously — we never ask who they are. We keep so little data that this page is short.

What we store

• List content you write — titles, descriptions, prices, photos, and messages exchanged in conversations. This is the product; it is deleted when a list expires (plus a 7-day grace period) or when the owner deletes it.
• An optional notification email — only if a list owner chooses to save one, used solely to notify about new messages and to recover edit links. It is never shown to visitors, never used for marketing, and the owner can clear it at any time.
• Two small cookies — your language preference, and a token that keeps a key-protected list unlocked for 7 days. No advertising or analytics cookies.
• Rate-limiting hashes — to prevent abuse we keep a salted, truncated hash of your IP address for up to 24 hours. The raw IP address is never written to storage.
• An aggregate view counter per list — a single number, with no record of who visited.

What we never do

No visitor accounts or identification. No analytics or tracking scripts. No advertising. No selling or sharing of data. All application pages carry a noindex tag so lists stay out of search engines.

AI features

When a list owner explicitly uses an AI feature (price estimate, description draft, photo identification, translation), the relevant item text and photos are sent to our AI provider (Anthropic) to produce the result. This happens only on the owner's request, is labelled at each button, and the output is stored only if the owner applies it.

Where data lives

Data is stored on Cloudflare's global infrastructure (databases and image storage). Expired and deleted lists are physically removed by a daily cleanup job, including all photos and conversations.

Your rights

A list owner can delete their list — and everything attached to it — at any time with the delete button; deletion is immediate and physical. For any other privacy request (Quebec Law 25 / PIPEDA), write to hi@linklot.app.