Privacy Policy

Account information — your email address, an optional display name, and a securely hashed password. If you sign in with Google, we receive your basic Google profile (email and name). If you turn on two-factor authentication, we store the secret and backup codes needed to verify it.

Your content — the timelines you write: their titles and entries. This content is yours.

Usage and technical data — we use privacy-first, cookieless web analytics (Cloudflare) that measure aggregate page views and real-world performance (Core Web Vitals). There is no cross-site tracking and no advertising profile. We also use error monitoring (Sentry), which may record technical details such as your browser and a truncated network address to help us fix crashes.

Cookies — a sign-in session cookie, a language-preference cookie, and a short-lived invite cookie. We use no advertising or cross-site tracking cookies.

Invitations — if you use or share an invite link, we record which account invited which, so we can grant the referral bonus.

Billing — if you subscribe to Plus, payment is handled by Stripe. Your card details go to Stripe directly and never touch our servers; we store your subscription status and a Stripe customer reference.

To provide and secure the service, send essential account emails (address verification, password resets, and security notices), prevent abuse (rate limiting and blocking disposable-email signups), and understand aggregate traffic and performance.

We do not sell your data, and we do not use your timeline content for advertising.

We rely on a small set of service providers, each processing data only to deliver their part of the service: Supabase (database), Vercel (web hosting), Fly.io (export-image rendering), Cloudflare (DNS and cookieless analytics), Google (optional sign-in), Stripe (payments), Resend (account emails), and Sentry (error monitoring).

You can delete your account yourself at any time, from account settings. Deletion takes effect immediately and permanently: your account and all of your timeline content are erased from our database, and any active subscription is canceled. This can’t be undone.

Afterwards we keep a small audit record of the deletion — including a one-way hashed reference to your former email address, basic technical details of the request (such as network address and device), and non-identifying details of the deletion itself (such as how it was confirmed and how much content was removed). If you ever subscribed, we also keep our copy of Stripe billing events, which reference your Stripe customer identifier, to meet financial obligations. Short-lived operational entries (such as verification codes and rate-limit counters) expire on their own. None of these can be used to restore your account or read your timeline content.

When you delete a single timeline it disappears from the product immediately, and its data is permanently erased from our database within 30 days.

Passwords are hashed, two-factor authentication is available, and connections are encrypted. No system is perfectly secure, but we take reasonable measures to protect your data.

Our infrastructure is global, so your data may be processed on servers outside your country.

When you turn on sharing for a timeline, anyone with its link can view its title and contents. Turning sharing off stops new visitors, but a link you have already shared works again if you re-enable sharing. Shared pages are not listed publicly and are not indexed by search engines.

You must be at least the minimum age required by the laws of your country or region to use TimeLink, and we don’t knowingly collect data from anyone below that age.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above.