Privacy Policy

Introduction

onestore.link ("we", "us", "our") is a universal app store link service. We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

• Email address — Used for authentication (magic links), link ownership, and service notifications.
• Anonymous visitor ID — A random identifier stored in your browser's localStorage for 30 days. Used for A/B testing and experiment assignment. Not linked to your identity.
• Click analytics — When someone clicks a link, we record the platform (iOS/Android/desktop), country, city, referral source, and user agent. This data is anonymous and not tied to individual users.
• Payment information — Processed securely by Stripe. We never store your credit card details. We only store your Stripe customer ID to manage subscriptions.
• Excluded IP addresses — If you use the "Don't count my own clicks" setting, we store the IP addresses or ranges you enter there, linked to the LINK they were added on — not to your account — for the sole purpose of leaving those visits out of that link's click counts. Because the list belongs to the link, everyone the link is shared with can see and change it, so an address you add there is visible to those collaborators. Nothing else is done with these addresses, they are never shared outside the link, and anyone with edit access to the link can delete them at any time from the link's settings. Visitors' IP addresses are never stored: they are compared against the list at the moment of the click and then discarded.
• How you found us — When an account or a link is created, we store how that visitor first reached the site: a campaign name (the utm_source / utm_campaign on the URL they arrived with), or, failing that, the website they came from — the domain only, never the full address they clicked from, which could contain search terms or other people's data. We also keep which page of ours they landed on first. This tells us which channels bring us users; it is not used to profile you and is never sold or shared. It is recorded once, on your first visit, and not updated afterwards. If you decline analytics in the cookie banner, nothing is recorded and the field stays empty.

How We Use Your Data

• To provide and operate the link redirection service.
• To authenticate you and protect your account.
• To provide click analytics for Pro users.
• To run A/B tests and improve the service.

Cookies & Local Storage

We use an HTTP-only session cookie for authentication and localStorage for the anonymous visitor ID. We do not use third-party tracking cookies or advertising trackers.

Third-Party Services

• Stripe — Payment processing. Subject to Stripe's privacy policy.
• Cloudflare — Hosting, CDN, and DNS. Subject to Cloudflare's privacy policy.

Your Rights

You can request access to, correction, or deletion of your personal data at any time by contacting us. If you delete your account, we will remove all your personal data and deactivate your links. EU residents have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

Data Retention

We retain your data for as long as your account is active. Anonymous click analytics are retained for up to 12 months. If you delete your account, personal data is removed within 30 days.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website.

Contact

For any questions about this privacy policy, contact us at privacy@onestore.link.