Privacy Policy
Hyperlink Locker is operated by Lucia Goode. This policy explains what information we collect, how we use it, and your rights in relation to it. We keep this simple because we believe you deserve to understand it.
1. What we collect
When you create an account or start a free trial, we collect:
- Email address — used to identify your account, send your licence key, and communicate with you about your subscription.
- Password — stored securely and hashed by Supabase. We never see your plain-text password.
- Workspace data — the event names, section names, item names, URLs, notes, and statuses you enter into Hyperlink Locker. This is stored in your browser's local storage and (for sync purposes) associated with your account.
- Licence key — generated when you purchase and used to verify your access.
- Purchase information — Gumroad processes your payment and sends us your email and sale ID. We do not receive your card number or financial details.
2. How we use it
- To create and manage your account.
- To send you your licence key and onboarding emails.
- To display your workspace data inside the app.
- To send renewal reminders when your licence is approaching expiry.
- To respond to support requests you send us.
We do not sell your data. We do not use it for advertising. We do not share it with third parties except as described below.
3. Third-party services
- Supabase — our database and authentication provider. Your email, password hash, and account data are stored on Supabase servers in the EU/US. Supabase is SOC 2 compliant.
- Gumroad — our payment processor. When you purchase, Gumroad shares your email and sale ID with us via a secure webhook. Gumroad's own privacy policy governs their data handling.
- Resend — our email delivery service. Your email address is passed to Resend solely to deliver transactional emails from Hyperlink Locker.
4. Cookies and local storage
Hyperlink Locker uses browser local storage to save your workspace data on your device. We use Supabase's authentication cookies to keep you signed in. We do not use tracking or advertising cookies.
5. Data retention
Your account and workspace data is retained for as long as your account exists. If you wish to delete your account and all associated data, email us at contact@hyperlinklocker.com and we will process your request within 30 days.
6. Your rights
Depending on your location, you may have the right to access, correct, or delete your personal data, or to restrict or object to its processing. To exercise any of these rights, contact us at contact@hyperlinklocker.com.
7. Children
Hyperlink Locker is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
8. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. No system is perfectly secure, but we take reasonable steps to protect your information.
9. Changes to this policy
We may update this policy from time to time. We'll note the date at the top when we do. Continued use of Hyperlink Locker after changes means you accept the updated policy.
10. Contact
Questions about this policy or your data? Email us at contact@hyperlinklocker.com. We'll get back to you promptly.