Privacy, in plain English

Smartlink is operated by Athanasia Lykoudi, based in Greece. For the purposes of the GDPR, Athanasia Lykoudi is the data controller. You can reach us any time at a.lykoudi@gmail.com.

• Your account email — when you sign in, we store the email address you use so we can identify your account and show you your links.
• Your links — the destination URLs you shorten, plus the titles, descriptions, and preview images we fetch from those pages so your Smartlinks look good when shared.
• Click data — when someone opens one of your Smartlinks, we record the approximate country, device type, operating system, browser, and the referrer (where the click came from). We do not store full IP addresses for analytics.
• Payment data — handled entirely by Stripe. We see your subscription status and your Stripe customer ID, but never your card details.

• Account email — to give you access to your dashboard. This is necessary to provide the service.
• Links — to make short links work. This is necessary to provide the service.
• Click data — to show you the analytics you signed up for (totals, countries, devices, referrers). This is our legitimate interest in running a useful analytics product.
• Payment data — to manage your subscription. This is necessary for the contract with you.

We keep this list short:

• Lovable Cloud — hosts the app and the database.
• Google — if you sign in with Google, we receive your Google account email. We don't see your password or contacts.
• Stripe — processes payments and stores your card details under their own privacy policy.

Each of these acts as a processor of your data on our behalf (Stripe as an independent controller for payments). Your data stays within the EU where available; we don't sell or share it with advertisers.

• Free plan: analytics history is kept for 7 days, then permanently deleted.
• Pro plan: analytics history is kept for 90 days, then permanently deleted.
• Your account and links — kept until you delete them or ask us to. If you close your account, we delete your links, their analytics, and your profile.

Under the GDPR you can ask us to:

• Access your data — we'll send you a copy of everything we hold about you.
• Delete your data — we'll remove your account, links, and analytics.
• Export your data — we'll give you a machine-readable file with your links and analytics.

Email a.lykoudi@gmail.com and we'll respond within 30 days, as required by law. You can also delete individual links yourself from your dashboard at any time. If you're not happy with our answer, you can complain to the Greek Data Protection Authority (HDPA) or your local authority.

We use only the cookies needed to keep you signed in — nothing for advertising. If a link's creator has connected their own analytics pixel (such as Meta or TikTok), that pixel fires when their link is opened and is governed by their settings, not ours.

Write to a.lykoudi@gmail.com — a human reads it.