Privacy Policy

1. Scope

This Privacy Policy applies to our website, applications, and services that allow users to create, share, and manage one-time encrypted secrets such as API keys, passwords, and access tokens. By using our services, you agree to the practices described in this policy.

2. Information We Collect

We collect information in the following categories:

• Account information: name, email address, login credentials, and authentication details.
• Secret metadata: expiration settings, creation timestamps, access events, and deletion status.
• Billing information: subscription status, invoices, and transaction references handled by our payment processor.
• Usage and device information: IP address, browser, device type, approximate location, and service interaction logs.
• Support and communications: messages you send to support or through contact channels.

3. How Secrets Are Handled

Secret content is designed to be stored securely and accessed through one-time links. Secrets are encrypted at rest and are intended to be permanently deleted after the first successful view or when their configured expiration period is reached. We retain operational metadata needed to run, secure, and audit the service.

4. How We Use Information

• Provide and operate the service, including account management and secure link delivery.
• Process subscriptions, payments, and billing-related support requests.
• Protect the platform against abuse, fraud, unauthorized access, and policy violations.
• Measure product performance and reliability through aggregate metrics and event data.
• Communicate important updates, security notices, and service-related announcements.

5. Legal Bases (Where Applicable)

Where privacy laws such as GDPR apply, we process personal data under one or more legal bases: performance of a contract, legitimate interests, consent (where required), and compliance with legal obligations.

6. Cookies and Similar Technologies

We use cookies and similar technologies for session management, authentication, security, and essential site functionality. We may also use limited analytics technologies to understand service performance.

7. Sharing of Information

We do not sell personal information. We may share data with:

• Infrastructure and hosting providers to run our services.
• Payment processors to manage subscriptions and transactions.
• Authentication and security providers for login and fraud prevention.
• Authorities or legal recipients where required by law or valid legal process.

8. Data Retention

We retain personal data only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Secret payloads are intended to be short-lived and deleted according to one-time-view and expiration rules. Operational logs and billing records may be retained longer.

9. Security

We implement administrative, technical, and organizational safeguards to protect data, including encrypted storage, access controls, and monitoring. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of your personal data. You may also have the right to withdraw consent where processing is based on consent.

To exercise these rights, contact us at hello@burnlinks.com .

11. International Data Transfers

If you access the service from outside the country where our infrastructure is located, your data may be transferred and processed across borders. Where required, we use appropriate safeguards for international data transfers.

12. Children’s Privacy

Our services are not intended for children under 13 (or a higher age where required by local law), and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the service after updates means you accept the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or our data handling practices, contact hello@burnlinks.com .

You can also review our Terms of Service.