Privacy Policy

1. Introduction

BioLink (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at thebiolink.lol (the “Service”).

By accessing or using the Service, you consent to the practices described in this policy. If you do not agree, please discontinue use immediately.

2. Information We Collect

a. Account Information: When you register, we collect your username, email address, and hashed password. Optional profile fields (e.g., display name, bio, avatar) are stored if provided.

b. Usage Data: We automatically log IP addresses, browser type, device info, pages visited, time spent, and referral URLs to analyze trends and improve service reliability.

c. User Content: Any links, descriptions, images, or metadata you add to your BioLink page (“User Content”) is stored to render your public profile.

d. Cookies & Tracking: We use essential cookies to maintain sessions and preferences. Analytics tools (e.g., Vercel Analytics) may collect anonymized usage data—no personally identifiable information is shared with third parties for advertising.

3. How We Use Your Information

We use collected data to:

• Provide, maintain, and secure your BioLink profile;
• Authenticate your identity and prevent fraud;
• Communicate service updates, security alerts, or policy changes;
• Analyze platform performance and fix bugs;
• Enforce our Terms of Service and Community Guidelines.

We do not sell, rent, or monetize your personal data. Ever.

4. Data Sharing & Disclosure

We only share your information in the following limited circumstances:

• With your consent: e.g., if you connect third-party services like Spotify or YouTube.
• For legal compliance: if required by law, subpoena, or to protect our rights, safety, or property.
• With service providers: trusted vendors (e.g., hosting, email delivery) who process data on our behalf under strict confidentiality agreements.

We never share email addresses, passwords, or private profile data with advertisers or data brokers.

5. Data Retention

We retain your personal data only as long as necessary:

• Active accounts: while your account is in use;
• Inactive accounts: up to 12 months of inactivity before archival or deletion;
• Deleted accounts: personal data is purged within 30 days, except where legal retention is required.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data;
• Export your User Content in machine-readable format;
• Opt out of non-essential communications;
• Restrict or object to certain data processing.

To exercise these rights, contact us via our Discord server (link in Section 9).

7. Security Measures

We implement industry-standard safeguards including:

• Encryption in transit (TLS 1.3+) and at rest;
• Regular security audits and dependency patching;
• Strict access controls for internal personnel;
• Automated monitoring for suspicious activity.

While no system is 100% secure, we respond immediately to verified breaches and will notify affected users if required by law.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from minors. If we discover such data, we will delete it promptly upon verification.

9. Contact Us

For privacy-related inquiries, data requests, or concerns, please reach out via our official Discord server.

We aim to respond within 14 business days.

10. Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal obligations. The “Last updated” date at the top will reflect revisions. Continued use after changes implies acceptance.