Privacy policy
We collect the minimum needed to run the service and to show reports to people who create links. We show no ads, use no third-party trackers and sell no data.
Who is responsible
CriarMeuLink is the controller of the data described here. For any request about your data, write to [email protected].
When someone clicks a link
We only record the date of the click, the approximate location, the device type and where the click came from. We do not store IP addresses or identify who clicked.
In practice, each click creates a record with:
- date and time;
- approximate country, region and city, worked out at the moment of the click without keeping the IP address they came from;
- device type (phone, computer, tablet), operating system and browser, without the full browser identifier;
- source: the site the person came from, or the link's tag, such as QR code or Instagram;
- a daily code that lets us count unique visitors on the same day. It is computed with a key that changes every 24 hours and cannot reveal who clicked or connect clicks across days.
We set no cookies on people who click. Automatic link previews, such as WhatsApp's, are detected and not counted as clicks.
When you create a link without an account
We store the link's destination (number, username or email) and the message you wrote, because they are the link itself. In your browser, a signed cookie remembers which links you created, to show "your links in this browser" and move them to your account if you sign up.
When you create an account
We store your name, email, phone number, your password in hashed form (never the password itself) and the preferences you choose, such as language, time zone and the weekly email report. Answers in the second sign-up step are optional. If you sign in with Google, we receive your name and email.
Your phone number is used for account recovery and to pre-fill your first link. We do not send marketing messages by phone.
Cookies
We only use necessary cookies: the signed-in session, the list of links created without an account, and your language choice. There are no advertising or third-party analytics cookies, which is why there is no cookie banner.
How long we keep data
- Individual click records: 13 months. After that only daily totals remain, with no individual data.
- Account: for as long as it exists. When you delete your account, your personal data is erased and your links are anonymised within 30 days.
- Support emails: as long as needed to resolve the request.
Who we share data with
With the providers that run the service, such as hosting, database and transactional email, under contract and only for that purpose. We also comply with valid court orders. We do not sell or rent data.
Your rights
Under Brazil's LGPD, and laws such as the GDPR where they apply to you, you can ask to access, correct, port and delete your data, and to know who it was shared with. From the dashboard you can export your account data as JSON and delete your account yourself. For anything else, write to [email protected].
Security
All traffic uses HTTPS. Passwords are stored with argon2id, an algorithm designed to resist cracking. Database access is restricted.
Changes to this policy
If we change anything important, we email account holders before the change takes effect. The date of the last update is at the end of this page.