Privacy

This page describes how the Link Deck product works with data, based on the current application. It is not legal advice.

Public decks

A published deck is public. Display name, bio, username, avatar, banner, social destinations, and visible cards (title, description, photo, destination URL, and selected video) can be viewed by anyone with the link. Hidden cards stay off the public page.

Accounts

Email and password authentication is handled by Supabase Auth. You can change your password from the studio. Password reset mail is sent only when a production email sender is configured.

Analytics

Public decks record page views, link clicks, and social-button clicks for the deck owner. The browser stores a first-party visitor identifier in localStorage for approximate unique viewers. The app does not store raw IP addresses; a keyed hash is used only to enforce a per-profile event rate limit. Blocked storage, bots, and extra devices change these counts.

Photos and video

Profile, banner, and card photos are stored in a public image bucket after the server re-encodes them as WebP and strips metadata. Premium video generation sends a card photo and motion prompt to Higgsfield. Source frames for generation live in a private bucket with short-lived signed URLs. Completed videos selected for a card are public.

Payments

When billing is enabled, Stripe processes All Yours subscriptions ($5 CAD / month) and optional $3 CAD generation-credit packs. Stripe customer and subscription identifiers are stored for entitlement. Return URLs never grant premium or credits.

Contact

Use your studio if you already have an account, or create a deck to reach the product. TODO: Owner should publish a privacy contact email here. None is in the repository.