Privacy notice

Who we are

GoLinks lets you create a personal page that brings your links and accounts together in one place. This notice explains what personal data we collect, why, how we protect it, and the rights you have under Saudi Arabia's Personal Data Protection Law (PDPL).

Data we collect about account holders

• Your email address: to sign you in with a one-time code and to contact you about your account.
• The content you add to your page: username, display name, bio, images (profile, cover and background), links and contact cards. This content is public, because publishing it is what the page is for.
• Your preferred interface language.
• A security log: events such as sign-in, sign-out, data export and account deletion requests, with the IP address at the time, to protect your account and investigate abuse.

Data we collect about page visitors

We count page views and link clicks so page owners can see aggregated analytics. We do not store visitors' IP addresses: an IP is used momentarily to determine the country and to prevent abuse, then discarded.

• What we keep per click: country, device type (mobile/desktop), the name of the referring site, and a one-way salted fingerprint used only to avoid double counting.
• Raw click records are deleted after 30 days; after that only aggregate numbers remain, which identify no visitor.
• We place no third-party trackers or ads on user pages.

Cookies

• golinks_session: keeps you signed in (30 days).
• golinks_csrf: protects your account against forged requests (30 days).
• NEXT_LOCALE: remembers your language (1 year).
• We use no third-party advertising or analytics cookies.

Why we process your data

• To provide the service you asked for: creating, publishing and running your page.
• To protect the platform and its users: preventing fraud and harmful links, and handling reports.
• To meet our legal obligations.
• We do not sell your personal data or use it for advertising.

Service providers we rely on

We use trusted providers who process data on our behalf and only on our instructions:

• Vercel: website hosting and storage of uploaded images.
• Neon: database.
• Upstash: session storage and abuse prevention.
• Resend: delivering sign-in codes to your email.
• Google Safe Browsing: checking added links for phishing and malware (only the link is sent, never any data about you).

Transfers outside Saudi Arabia

Data is currently stored on our providers' servers outside the Kingdom of Saudi Arabia, mainly in the United States. We use providers that encrypt data in transit and apply appropriate security safeguards, and we follow the regulatory requirements for transferring personal data outside the Kingdom.

How long we keep data

• Your account and page data: for as long as your account exists.
• Raw click records: 30 days.
• When you delete your account: your page is hidden immediately and your data is permanently deleted after 7 days. Images are removed from storage and IP addresses are stripped from your security log.
• Copies may remain briefly in our providers' rolling backups before being overwritten automatically, and never longer than 30 days after deletion.

Your rights

• Access and a copy: Settings → Download my data gives you a file with everything we hold about your account.
• Correction: you can edit your page and details at any time from your dashboard.
• Deletion: Settings → Delete account.
• Withdrawing consent: stop using the service and delete your account.
• Complaints: if you believe your data was mishandled, you may complain to the Saudi Data & AI Authority (SDAIA).

How we protect your data

We use encrypted connections (HTTPS) on every page, secure sessions that scripts in the browser cannot read, authorization checks on every request, rate limits, and inspection of uploaded files. We never ask for or store passwords.

Changes to this notice

We may update this notice when the way we handle data changes. We will change the "last updated" date above, and email you if the change is significant.

Contact us

For any question or request about your personal data: privacy@golinks.sa