Privacy

Linkcroft saves the links you care about and turns them into cards you can actually read. To do that we handle some of your data. This page explains what, why, and how to get rid of it — in plain language, no legal fog.

It covers everything called Linkcroft: this website (linkcroft.com), the app (app.linkcroft.com), the browser extension, and the mobile apps we are building.

Who we are

Linkcroft is the data controller for the information described here. Questions, requests or complaints? Write to info@linkcroft.com. We answer every message ourselves.

What we collect

• Your account — your email address and a password. The password is stored as a one-way hash: nobody at Linkcroft can read it.
• The links you save — the web address, the title, your own note and tags, and the details we pull off the page to fill the card (things like a price, an address, a cooking time). You decide what gets saved by saving it.
• A slice of the page you saved — up to 8,000 characters of text from that page. It powers search inside your own collection and lets us fill in the card. See “Pages we never read” below for the hard limits on this.
• Device keys — if you connect a phone or another tool, we store only a fingerprint of the key, never the key itself. It is shown to you once, at creation.
• Cookies — one cookie to keep you signed in to the app, and, while this website is in private beta, one that remembers you entered the access password. Neither is used for tracking.
• Your email on the waitlist — only if you type it into the form here.

We run no advertising trackers and no analytics scripts, we build no profiles, and we do not sell or rent your data to anyone. Ever.

Pages we never read

Some pages are nobody’s business but yours. Linkcroft keeps a blocklist of sensitive sites — online banking, webmail, government portals, social networks. On those, the page text is never stored and never sent to our AI step; the block sits in the extension itself, so the text does not even leave your browser. Saving the link still works: you keep the bookmark, we skip the contents.

The browser extension

• It reads a page only when you click save. It does not watch you browse, and it runs no background collection.
• What it sends at that moment: the web address, the title, and the page text described above — to your own Linkcroft account, over an encrypted connection.
• Limited use: our use of information received from the extension follows the Chrome Web Store User Data Policy, including the Limited Use requirements. We use that data to build your cards and nothing else — no transfer to third parties except the processors named below, no advertising, no selling, and no human reading it except where you ask us to help with a problem.

How AI is used

To fill a card, we send the web address, the title and that slice of page text to Anthropic, our AI provider, and get structured details back. Your data is not used to train anyone’s models. Pages on the blocklist never go through this step, and neither does your email address or anything else about your account.

Who processes it for us

• Supabase — database and sign-in.
• Vercel — hosting of the website and the app.
• Anthropic — the AI step described above.

They process data on our instructions only and may not use it for their own purposes. Where that involves a transfer outside the European Economic Area, it takes place under the European Commission’s standard contractual clauses.

Why we are allowed to

For your account and the links in it: because we need it to deliver the service you signed up for (a contract). For the waitlist email: because you consented by submitting the form, and you can withdraw that at any time. We do not rely on “legitimate interest” to do anything you would not expect.

How long we keep it

Your links and account stay until you delete them. Delete your account and everything tied to you goes with it, immediately — no waiting period, no shadow copy. Copies held in our provider’s routine backups disappear as those backups are overwritten.

One honest exception: when someone corrects what kind of thing a page is (“this is a boat, not a car”), we keep that correction so Linkcroft reads that site better for everyone. On deletion your name is stripped out of it by the database itself. What is left — a website, a category, a date — can no longer be traced back to you, so it is no longer personal data.

Deleting your account

Open the app, go to your account page, and choose to delete it. It happens on the spot: your links, notes, tags, keys and sign-in details are removed. You do not have to email us and ask for permission. If you would rather we did it for you, write to info@linkcroft.com and we will.

Your rights

You can ask us for a copy of your data, correct it, delete it, restrict or object to what we do with it, or receive it in a portable file. Email info@linkcroft.com and we will handle it within one month. If you think we got it wrong, you can complain to your national data protection authority — in the Netherlands that is the Autoriteit Persoonsgegevens.

Age

Linkcroft is built for adults and older teenagers, so we ask that you be 16 or over. That is not a judgement about younger readers: European privacy law says a child under 16 cannot agree to this on their own — a parent has to — and we have deliberately not built the parental consent machinery that would require. If a younger child has given us data, tell us at info@linkcroft.com and we will remove it.

Changes

As Linkcroft grows we will update this page. The date at the top shows the last change; for anything that materially affects you, we will say so in the app as well.