Last updated: September 26, 2026

1. Who we are

AffyLink (“we”, “us”) provides affiliate keyword linking and click/impression analytics for publishers. Contact: [email protected] · 9169 W State St #2241, Garden City, ID 83714.

2. Information about you (account holders)

• Account: name, email, password (hashed), plan/subscription state via Stripe.
• Billing: payment details are processed by Stripe; we do not store full card numbers.
• Product data: domains, keywords, links, settings (including disclosure text), and in-app usage needed to operate the Service.
• Support & transactional email: messages you send us and mail we send (receipts, security, product notices).

3. Information about visitors of your website

When you install the AffyLink tracker on an authorized domain, we process limited technical data about visitors of your website so we can inject keyword links and measure engagement:

• Click events: which link/keyword was clicked, timestamp, referrer (if provided), user agent, bot flag, a truncated IP (IPv4 /24 or IPv6 /48 — last bits zeroed), and a monthly salted hash of the full IP used only for fraud/dedup heuristics. We do not store full visitor IPs in the clicks database.
• Impression events: counts of when injected links are shown; we aggregate impressions into rollups for dashboards (not a full browsing profile).
• Request context: domain authorization checks and rate-limit counters (full IP may be held briefly in Redis/cache for rate limiting, then expire).

You are the publisher of the site; depending on your jurisdiction you may be a controller of visitor data and AffyLink a processor for this processing. Configure domains you control and provide any notices your visitors require.

4. Cookies & similar technologies

• AffyLink tracker (widget): the production tracker script does not set cookies on visitors’ browsers. Clicks are reported via asynchronous beacons; injected links point at the destination URL directly.
• AffyLink dashboard (app.affylink.com / logged-in app): we use session cookies (and similar) necessary to keep you signed in and secure the account UI. We do not use the tracker to drop advertising cookies on your readers.

5. How we use information

• Provide, secure, and improve the Service (keyword injection, analytics, domain verification, abuse prevention).
• Bill subscriptions and communicate about your account.
• Send optional product tips only where you consent (e.g. audit-tool marketing checkbox); transactional mail you request (like an audit report) is separate.
• Comply with law and enforce our Terms.

6. Sharing

• We do not sell personal information.
• Processors: hosting, email, and Stripe for payments — under contracts and only as needed to run AffyLink.
• Legal: if required by law or to protect rights, safety, or the Service.

7. Data retention

• Account deletion: when you delete your account, we soft-delete then permanently purge account data after 90 days (sooner if you request immediate erasure where supported). That purge covers links, keywords, domains, clicks, impression rollups, and related account records we control.
• Active accounts: click rows older than 13 months are pruned automatically. Impression rollups and other analytics may be retained while your account is active as needed for reporting and abuse prevention, subject to product changes we announce.
• Public link audit tool: we store the audited URL, truncated IP (IPv4 /24 or IPv6 /48 — never the full IP in the audits database), optional email, consent flag, and results for up to 90 days, then purge. Full IPs for audit rate limits live only in short-lived counters. Marketing follow-ups require explicit consent and honor unsubscribe/suppression.

8. Security

We use industry-standard measures (HTTPS, access controls, hashed passwords). No method is 100% secure.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object/restrict certain processing. Contact [email protected]. You may opt out of marketing email anytime. Account holders can delete their account in settings.

10. Children

AffyLink is not directed to children under 13 (or the age required in your region). We do not knowingly collect their personal information.

11. International transfers

We may process data in the United States and other countries where our providers operate. If you use AffyLink from elsewhere, you understand data may leave your country.

12. Changes

We may update this Policy by posting a new version here. Material changes will be highlighted when practicable.

13. Contact

Privacy questions: [email protected].