Qlynk1. Who is responsible
The controller is ClosiQode, the trade name of Fabien Kost, sole proprietor (EI), publisher of Qlynk (8 rue Charles Michel, 56630 Langonnet, France, SIRET 795 123 561 00032). For any question about your data, use the contact form with the subject “Personal data”.
Key points. Clicking a Qlynk link sets no cookie and loads nothing from another site. On the pages of the qlynk.eu site, Google Analytics measures the audience only if you click “Accept” in the banner. No advertising trackers.
2. If you click a Qlynk link
Qlynk links (for example qlynk.eu/my-link) are created by members, who want to know how many people open them. When you click one, here is what happens.
- No cookie is set on your device, and no content is loaded from a third-party service.
- Your IP address is never stored in full. It is used, in memory, for the time it takes to detect robots and to guess your country with a database hosted on our own server. Only the first three blocks are kept (for example 82.64.136.x), or a short prefix for an IPv6 address.
- Unique visitors are counted without tracking you. A fingerprint is computed with a secret that changes every day, and it is used only on that day. It is impossible to recognize someone from one day to the next.
- Your browser is not stored as is. We keep only what is inferred from it: device type (mobile, tablet, computer), system and browser.
- We also keep the country, the language, the site you came from, and whether you arrived through a QR code.
- The detail of each visit is kept for 13 months. After that it is deleted and only daily totals remain, with no personal data.
- Members see these statistics as figures and charts. They never see an IP address.
Purpose and legal basis. To provide members with the statistics of their links and to protect the service against robots and abuse. Legal basis: the legitimate interest of Qlynk and its members in measuring the audience of their links, with data reduced to what is strictly necessary. You can object by writing to us (see the “Your rights” section), but since we keep nothing that identifies you, it is in practice impossible to find your visits.
For these statistics, the member who created the link decides how the figures are used; Qlynk processes them on their behalf, under the conditions of the Terms of Use.
3. If you visit qlynk.eu
- Fonts, icons, style sheets and scripts are hosted on qlynk.eu. Without your consent to audience measurement or advertising, no outside site receives your IP address when you browse our pages.
- Measurement of our ads with Meta, only if you accept it. The banner presents audience measurement (Google Analytics) and advertising (Meta) together: “Accept all” and “Reject all” carry the same weight. If you accept, the pixel of Meta Platforms Ireland Limited (Facebook, Instagram) is loaded on the public and sign-in pages. It sets the
_fbpcookie and, if you arrive through one of our ads, the_fbccookie, for 90 days, and receives your IP address, your browser, the pages viewed and the fact that you create an account. If you then move to the Pro plan, it also receives the purchase (plan and amount), on the payment confirmation page only. So that these measurements are reliable, we also send Meta directly, from our server, the sign-up and the purchase, with your email address and your member number in the form of an irreversible fingerprint (SHA-256). Purpose: to know which ads bring sign-ups and subscriptions, and to show them to people who might be interested. Meta is a joint controller with us for this collection and may process this data in the United States, under the EU–US Data Privacy Framework. Legal basis: your consent. Without this consent, nothing is sent to Meta, neither by your browser nor by our server. Withdrawing consent through “Cookie settings” deletes the_fbpand_fbccookies. Qlynk short links (qlynk.eu/r/…) and your member area never load this pixel. - One technical cookie. A session cookie is set only when it is needed: when you sign in, and when the contact form is displayed (it protects the form against forged submissions). It disappears when you close your browser or sign out. This cookie is essential to the service, so it does not require consent.
- Your theme preference (light or dark) is stored in your browser, on your device. It is never sent to our servers.
- Server logs. Like any host, o2switch keeps technical logs (IP address, date, page requested) for security and to meet its legal obligations, for twelve months at most.
4. If you have an account
To create an account, we ask for the strict minimum: a username, an email address and a password (stored only in encrypted form, it is impossible to read back). A profile photo is optional. If you arrive on Qlynk through a campaign link (an ad, for example), we also note in your account the source of that campaign (the utm_source, utm_medium, utm_campaign and utm_content parameters of the address), to know which campaigns bring sign-ups. These parameters are the same for all visitors of a campaign: they do not identify you, and no cookie is used to keep them.
We also keep what you create in your area (links, categories, API keys, statistics of your links), your plan (Free or Pro), the date of your last sign-in, and the date on which you accepted the Terms of Use.
Purpose and legal basis. To create and run your account, to send you the necessary emails (address verification, forgotten password, change of address), and to ensure the security of the service. Legal basis: performance of the contract that the Terms of Use constitute. We do not send you any newsletter or promotional message.
You stay in control. From your profile, you can export your data (a file with your account, your links and their statistics) and delete your account. Deletion erases your links, your statistics, your API keys and your photo.
5. If you write to us
The contact form collects your name, your email address and your message, in order to reply to you. Legal basis: the legitimate interest in replying to the requests received (and, if you are already a customer, performance of the contract). The message is forwarded by email to the publisher and kept for the time needed to handle your request, then erased at the latest twelve months after the last exchange.
To limit spam without a third-party service (and therefore without a CAPTCHA), the form uses an invisible field, a minimum delay before sending and a limit of three messages per hour. For this limit, we keep for 24 hours an anonymous, irreversible fingerprint of your connection, never your IP address.
6. Payment for the Pro plan
Payment for the Pro plan is handled by Stripe (Stripe Payments Europe, Ltd., Ireland). Your card number is entered on Stripe’s site: Qlynk does not receive it and does not keep it. We keep only the identifier of your subscription at Stripe, its period and its status, as well as invoices, which the law requires us to keep for ten years. Legal basis: performance of the contract and compliance with our accounting obligations. For its own legal obligations (fraud prevention, for example), Stripe is responsible for its own processing, described in its own privacy policy. The Free plan involves no payment, and therefore no banking data.
7. Who receives your data
We do not sell your data and do not hand it over to anyone. It is accessible only to the publisher of Qlynk and to these providers, within the limits of their assignment:
- o2switch, host and processor, which operates our servers located in France (see the legal notice, available in French)
- Stripe, for payment for the Pro plan only
- Google (Google Analytics), for audience measurement of the site’s pages, only if you have accepted it
- Meta (Meta Platforms Ireland Limited), for measuring our ads on Facebook and Instagram, only if you have accepted advertising
The country of a visit is determined with a database installed on our server: no IP address is sent to a geolocation service.
8. Retention periods
| Data | Period |
|---|---|
| Detail of a link’s visits (truncated IP, country, device, browser, etc.) | 13 months, then deletion. Anonymous daily totals remain. |
| Account, links, categories, API keys | As long as the account exists, then deletion when the account is closed |
| Contact form messages | For the time needed to handle the request, twelve months at most after the last exchange |
| Contact form anti-spam fingerprint | 24 hours |
| Google Analytics audience measurement cookies (if you accept them) | 13 months at most; your choice (consent or refusal) is kept for six months |
Meta advertising cookies _fbp and _fbc (if you accept them) | 90 days; your choice is kept for six months |
| Host’s technical logs | Twelve months at most |
| Pro plan invoices | Ten years (accounting obligation) |
9. Security
Communications with Qlynk are encrypted (HTTPS). Passwords are encrypted irreversibly, forms are protected against forged submissions, API keys can be revoked at any time, and access to the servers is limited to the publisher. No system is infallible: in the event of a data breach presenting a risk to you, we would inform you and the CNIL, within the time limits provided by law.
10. Your rights
You can at any time request access to your data, its rectification, its erasure, the restriction of its processing, object to it, or retrieve it in a reusable format (portability).
- Members: export your data and delete your account yourself from your profile.
- Everyone: write to us through the contact form (subject “Personal data”). We reply within one month at most.
If, after contacting us, you believe your rights are not being respected, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr).
11. Changes
This policy may change, for example if Qlynk adds a service. The date of the last update is shown at the top of the page. For a significant change that concerns members, we notify them by email.