Back to Dashboard

Privacy Policy

Last updated: October 2026 • Version 1.0

Zero Third-Party Tracking

LinkStack does not run third-party advertising SDKs, behavioral analytics, or sell data.

Isolated User Data

Every package, section, URL, and tag is bound strictly to your authenticated account ID.

Anti-SSRF Protected

Metadata crawls are validated against private IP ranges and internal network addresses.

1. Information We Collect

  • Account Credentials: Email address and hashed password (via bcrypt) for authentication.
  • Bookmarks & Packages: The URLs, titles, descriptions, icons, and tags you explicitly organize.
  • Usage Metrics: Local click counts and last visited timestamps to help you find your most frequented resources.

2. Metadata Scraping Safety

When you paste a URL, LinkStack retrieves the title, description, and favicon using safe server-side fetching. Every request is filtered by DNS IP validation to prevent Server-Side Request Forgery (SSRF) and respects strict size and timeout limits.

3. Your Choices & Data Portability

You own your data completely. You can export your entire collection at any time as standard Netscape Bookmark HTML (compatible with Chrome, Firefox, Safari) or JSON via the Import & Export view. You can also permanently delete any package, URL, or your entire account directly from the application.

4. Changes & Open Source Transparency

LinkStack is fully open-source. All architectural decisions, privacy safeguards, and schema revisions are documented and audited in our public GitHub repository.