Last updated: 10 October 2026
Your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, and the choices you have in relation to your personal data when you use BioHasL.ink.
We collect information you provide directly to us, such as when you create an account, build your bio page, or contact us. This includes: your name and email address (via OAuth provider), profile information you add to your page (bio, avatar, links), usage data and preferences you set within the Service, and any content you upload or embed.
When you use the Service, we automatically collect certain information, including: log data (IP address, browser type, pages visited, time spent), device information (hardware model, operating system), and analytics data about how visitors interact with your bio page (page views, link clicks, referrer URLs, and approximate location derived from the visitor's IP address — country, region and city). City-level figures are only shown to a page owner once enough visits exist that no individual could be identified from them; below that threshold the city is omitted entirely. We also record the browser, operating system and preferred language reported by the visitor's device. Visitor IP addresses are used transiently to derive an approximate location and a one-way, salted fingerprint used to count unique and returning visitors; the IP address itself is never stored. We also assign a random, per-tab session identifier so we can show a page owner how visitors moved through their page in a single visit; it is stored only for the life of the browser tab, is never linked to the visitor fingerprint described above, and journey reporting is aggregated with rare paths suppressed so no individual visit can be singled out. We use PostHog to help us understand usage patterns. This data is aggregated and used to improve the Service.
We use the information we collect to: provide, maintain, and improve the Service; create and manage your account; send you service-related communications (account confirmations, security alerts); respond to your comments and questions; monitor and analyse usage trends; detect and prevent fraudulent or abusive activity; and comply with legal obligations.
We do not sell, trade, or rent your personal information to third parties. We may share your information with: service providers who assist us in operating the Service (hosting, analytics, email delivery, payment processing) under confidentiality agreements; law enforcement or government bodies when required by law; and successors in the event of a merger, acquisition, or sale of assets, where your information may be transferred as a business asset.
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse how the Service is used. You can control cookie settings through your browser, but disabling cookies may affect the functionality of the Service. We use session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).
We integrate with third-party services to provide certain features, including: WorkOS for authentication, Stripe for payment processing, ImageKit for image hosting, Resend for transactional email, and PostHog for analytics. Each of these services has its own privacy policy governing how they handle your data. We encourage you to review their policies.
We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymise your personal information within a reasonable period, except where we are required to retain it for legal, regulatory, or legitimate business purposes.
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Depending on your location, you may have certain rights regarding your personal information, including the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; and data portability. To exercise these rights, please contact us through your account settings or reach out directly.
If you use our age verification or content gating features, please note that we do not store dates of birth or any sensitive verification data. Verification is handled entirely in the visitor's browser and no personal information is transmitted to our servers as part of this process.
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.
Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we ensure appropriate safeguards are in place to protect your information in accordance with applicable law.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us. We are committed to resolving any privacy-related complaints in a timely manner.