Privacy Policy
Last updated: August 20, 2026
This policy explains what information we collect when you use deeplinkify.eu, how we use it, and what choices you have.
1. Public Generator and Anonymous Workspaces
You can use the public Amazon deep-link generator without logging in. When a URL must be validated or a shortened Amazon link must be resolved, the URL is processed by our server to identify the permitted final Amazon destination. Normal hosting infrastructure may also create temporary security and request logs.
When you successfully create your first link, we create an anonymous workspace with a random internal user identifier, save the tracked link to it, and place a strictly necessary session cookie in your browser. Merely visiting the site or submitting an invalid URL does not create an anonymous workspace. The cookie lets that browser open the dashboard, manage its links, and view personal click analytics without supplying an email address.
All Deeplinkify features are free. Login is optional for creating, tracking, and managing links, but it protects an anonymous workspace and makes it accessible from other browsers or devices. Organizations and custom domains are the only workspace features that require login.
2. Workspace and Login Information
For an anonymous or logged-in workspace, we may process:
- A random internal user identifier, workspace type and status
- Active-session information such as device type, browser family, operating system, and activity times
- Your saved Amazon destinations, link titles, imported metadata, custom previews, status, and destination history
- Feedback messages, their category and status, linked to your workspace
If you log in, we also process your email address, email verification, first and last login times, login count, locale and timezone. If you use Google sign-in, we process your Google account identifier and verified email address. If you use organizations or custom domains, we process organization membership information or the domain and its verification status.
If you use Google sign-in, we also retain the profile-photo URL returned by Google. When that photo is shown, your browser requests it directly from a Google image host (googleusercontent.com or ggpht.com) with the Referrer header disabled. Google can still receive your IP address and other technical request metadata. This display does not add Deeplinkify tracking.
When an anonymous workspace logs in with a new identity, it is converted to a logged-in workspace. If the identity already has a Deeplinkify account, links and their related data are transferred to that account before the temporary anonymous user record is removed. We keep a limited audit record of the merge for integrity and security.
One-time login codes are stored only as cryptographic hashes. Persistent session tokens are cryptographically random bearer values and are also stored only as hashes, so the original token in your browser cannot be recovered from the database.
3. Tracked-Link Analytics
When someone opens a tracked link created in an anonymous or logged-in workspace, we classify the request as a human click, bot, or prefetch and may store the event time, referring host, source variant, device type, browser family, operating system family, browser language, country, and city when available.
We do not store visitors' full IP addresses or raw user-agent strings in click analytics. For human clicks, a masked IP address and coarse browser signals are processed transiently to create a keyed, monthly rotating hash used to estimate unique visitors. The original inputs cannot be recovered from that hash. Location is coarse and best effort; it is not precise GPS location. Preview crawlers and known automated requests are not counted as human clicks.
Tracking is designed not to delay or interrupt the Amazon redirect. Analytics failures do not prevent the link from working.
4. Website Analytics
We use Google Analytics 4 to understand use of our public pages and product flows. It may process pages visited, approximate location, referral source, device and browser information, and events such as generating or copying a link. Google Analytics may use cookies or similar identifiers.
You can limit Google Analytics by blocking analytics cookies in your browser or using the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy for more information.
5. Cookies and Similar Technologies
The public site may use Google Analytics cookies. Anonymous workspaces, login, and dashboard flows use strictly necessary first-party cookies for request protection and authentication. The persistent workspace cookie is marked Secure in production, HttpOnly, and SameSite=Lax. Its opaque token is not placed in URLs or made available to page JavaScript. Tracked-link analytics does not set a cookie on people who open a shared link.
The anonymous-workspace feature uses the same session-cookie format, security flags, server-side hash lookup and persistence rules as logged-in sessions. It does not invalidate existing logged-in sessions. If you log in from a new browser, a new session is created for that browser and your registered workspace remains available there.
An anonymous workspace depends on its browser cookie to prove ownership. Clearing cookies or site data, using a private window, switching browser profiles or devices, or automatic browser storage cleanup can remove access from that browser. Logging in before that happens lets you recover the workspace using your identity. We do not expose an anonymous workspace based only on a guessed user ID, link code, email address, or other public value.
6. How We Use Information
We use information to provide and secure the service, authenticate workspace owners, deliver and manage links, produce the analytics requested by link owners, prevent abuse, respond to feedback, diagnose errors, and improve Deeplinkify. We do not sell personal information.
CSV files uploaded for bulk creation are processed during the request and are not stored as separate uploaded files. Successfully created links and their imported metadata are saved to the current anonymous or logged-in workspace.
7. Service Providers and External Destinations
We rely on service providers for hosting and email delivery, Google for Google sign-in and Google Analytics, and Sentry for technical error monitoring. Sentry is configured without default collection of personally identifiable information. These providers process information under their own terms and privacy policies.
Generated links redirect to Amazon. When a preview crawler or user follows a link, Amazon receives the request under Amazon's own privacy practices. Deeplinkify is not responsible for the privacy practices or content of third-party sites.
8. Data Retention and Security
We retain workspace, link, analytics, and feedback information for as long as it is needed to provide the service, maintain security, resolve disputes, or meet legal obligations. Expired authentication challenges, merge audits, and security records may be kept for a limited period for abuse prevention and data integrity. You can contact us to request account or data deletion.
We use access controls, hashed credentials and session tokens, encrypted transport, server-side authorization, and restricted production configuration. No online service can guarantee absolute security.
9. Your Choices and Rights
You may use the public generator without logging in, log in to protect an anonymous workspace, sign out or revoke active sessions, stop using tracked links, block optional analytics, or contact us to request access, correction, export, objection, restriction, or deletion where applicable. You may also have the right to complain to your local data-protection authority.
10. Amazon Associates Program
Deeplinkify is a participant in the Amazon Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon. As an Amazon Associate, we earn from qualifying purchases.
If you generate a deep link from an Amazon URL that already contains an affiliate tag, that tag is preserved in the generated link. For more details on how affiliate tracking works with deep links, see our content on the main site.
11. Children's Privacy
Deeplinkify is not directed at children under 13 years of age. We do not knowingly collect any personal information from children.
12. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.
13. Contact
If you have questions about this privacy policy, contact us at info@deeplinkify.eu.