Privacy Policy | SlashLink

Last updated: October 4, 2026

This Privacy Policy explains how SlashLink (“SlashLink”, “we”, “us”, or “our”) collects, uses, and shares information when you use our website, dashboard, and link-routing service (the “Service”). We aim to collect only what we need to run the Service and to keep reader-level data aggregated wherever possible.

1. Who we are

SlashLink is operated by Slash Make LLC (United Arab Emirates), which is the data controller for the personal information described in this policy.

For any privacy question or request, contact us at [email protected].

2. Information we collect

Account information. When you sign up, our authentication provider (Clerk) collects your email address and login credentials so you can access your account. We receive your account identifier and email address.

Link and configuration data. The links you create, their source products, destination storefronts, affiliate tags you configure for each Amazon regional store, routing rules, and custom-domain settings.

Redirect and analytics data. When a reader clicks one of your links, we process technical signals to route them to the correct Amazon storefront and to produce aggregate analytics for your dashboard. These signals include:

Approximate country (derived from the reader’s IP address via Cloudflare’s geo-location headers)
Referring host or source
Device type and operating system category
Which Amazon storefront the reader was routed to
Whether the Amazon app was opened (deep link) or a browser redirect was used

We use the reader’s IP address at the moment of the request for geo-routing, security, rate-limiting, and bot detection. We do not store raw IP addresses in your analytics data or in any long-term logs. Reader analytics are stored in aggregate form and are not used to build profiles of individual readers or to identify them.

Billing information. When you purchase click credits or a custom-domain subscription, our payment processor (Stripe) collects and processes your payment details. We receive confirmation and limited billing metadata such as the amount, product purchased, transaction status, and billing email. We do not store your full card number, CVV, or bank account details.

Communications. If you email us, submit a support request, or reply to a transactional message, we keep that correspondence to help you and to improve the Service.

Product usage data. We use a privacy-friendly analytics tool (GoatCounter) to understand how the website and dashboard are used in aggregate. This tool is configured to avoid collecting personal information, does not use cookies for tracking, and does not build advertising profiles.

3. How we use information

We use the information described above to:

Provide, operate, and route your links through the Service.
Create the click analytics and reporting shown in your dashboard.
Process payments, credits, subscriptions, and refunds.
Send transactional messages such as receipts, low-balance warnings, credit exhaustion notices, and custom-domain status updates.
Detect and prevent abuse, fraud, bot traffic, and violations of our Terms of Service.
Maintain the security and integrity of the Service, including rate-limiting and access controls.
Comply with applicable legal obligations.

We do not use your information for advertising. We do not sell your data. We do not build advertising profiles from reader click data.

4. Legal bases (where applicable)

Where data-protection law such as the GDPR or UK GDPR applies, we process personal information on the following bases:

Contract. Processing necessary to provide the Service to you under our Terms of Service.
Legitimate interests. Processing necessary to secure, maintain, improve, and operate the Service, and to detect fraud and abuse, where those interests are not overridden by your data-protection rights.
Consent. Where we specifically ask for your consent for a particular use.
Legal obligation. Where we need to process data to comply with applicable law.

We do not sell, rent, or trade your personal information. We share information only with the following categories of service providers (“subprocessors”), under agreements that require them to protect it and to use it only for the purposes we specify:

Provider	Purpose
Cloudflare	Hosting, edge compute (Workers), content delivery, DNS, DDoS protection, and bot detection
Clerk	Account authentication, session management, and login security
Stripe	Payment processing, subscription billing, and the customer billing portal
Resend	Delivery of transactional email (receipts, alerts, notifications)
GoatCounter	Privacy-friendly, cookie-free website and dashboard analytics

We may also disclose information if:

Required by law, regulation, legal process, or enforceable governmental request.
Necessary to protect the rights, property, or safety of SlashLink, our users, or the public.
Involved in a merger, acquisition, reorganization, or sale of assets, in which case we will notify affected users before personal information is transferred and becomes subject to a different privacy policy.

6. Cookies and similar technologies

Necessary cookies. Our authentication provider (Clerk) uses cookies that are strictly necessary to keep you signed in and to secure your session. These cannot be disabled without breaking the login experience.

No tracking cookies. We do not use advertising cookies, cross-site tracking pixels, or third-party analytics that build advertising profiles. Our website analytics tool (GoatCounter) does not use cookies.

Local storage. The dashboard may use browser local storage for interface preferences such as theme settings. This data stays on your device and is not transmitted to us.

7. Data retention

Account and billing data. We retain account information and billing records for as long as your account is active and as required to provide the Service. After account closure, we retain records as needed to meet legal, tax, and accounting obligations (typically up to 7 years for financial records, as required by UAE commercial law).

Link data. Your link configurations are retained for as long as your account is active. After account deletion, link configurations are removed within 30 days, though cached routing data at edge nodes may persist for a short period as caches expire.

Redirect analytics. Detailed (per-click) redirect data is retained for approximately 90 days. After that window, data is consolidated into long-term aggregate summaries (totals by country, device, referrer, and storefront) that are not tied to individual readers. Aggregate summaries are retained for as long as your account is active.

Communications. Support correspondence is retained for as long as reasonably needed to resolve your issue and to maintain records of our interactions, typically no longer than 3 years after the last communication.

8. Security

We implement technical and organizational measures to protect information, including:

Encryption in transit (TLS/HTTPS on all connections).
Encryption at rest for stored data.
Access controls limiting who within our organization can access personal data.
Rate-limiting and bot-detection controls at the edge (Cloudflare).
Regular review of our security practices and subprocessor agreements.

No method of transmission or storage is perfectly secure. If we become aware of a security breach that affects your personal information, we will notify you and any applicable regulatory authority as required by law, without undue delay.

9. International transfers

SlashLink is operated from the United Arab Emirates. Our service providers may process information in countries other than yours, including the United States and countries within the European Economic Area. Where required by applicable data-protection law (such as the GDPR), we rely on appropriate transfer safeguards, including Standard Contractual Clauses approved by the European Commission, to protect information transferred outside the EEA or UK.

10. Your rights

Depending on your location, you may have the following rights regarding your personal information:

Access. Request a copy of the personal information we hold about you.
Correction. Request correction of inaccurate or incomplete personal information.
Deletion. Request deletion of your personal information, subject to legal retention requirements.
Data portability. Request a machine-readable export of your personal information.
Restriction. Request that we limit how we process your personal information in certain circumstances.
Objection. Object to processing based on our legitimate interests.
Withdraw consent. Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, email [email protected]. We will verify your identity and respond within the timeframe required by applicable law (typically 30 days). We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

You also have the right to lodge a complaint with your local data-protection authority.

11. Children

The Service is intended for users who are at least 18 years old and who can enter into a binding contract. We do not knowingly collect personal information from children under 16 (or under 13 in jurisdictions where that is the applicable threshold). If you believe a child has provided us with personal information, contact us at [email protected] and we will promptly delete it.

12. Do Not Track and Global Privacy Control

Some browsers transmit “Do Not Track” (DNT) or “Global Privacy Control” (GPC) signals. Because we do not track users across third-party websites and do not build advertising profiles, our practices are consistent with these signals by default. We do not serve targeted advertising and we do not share personal information with ad networks.

13. California privacy notice

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) provides you with specific rights regarding your personal information. We do not sell or share (as defined by the CCPA) personal information. You have the right to know what information we collect, to request deletion, and to not be discriminated against for exercising your rights. To make a request, email [email protected].

14. Changes to this policy

We may update this policy from time to time. If we make material changes to how we collect, use, or share your personal information, we will:

Update the “Last updated” date at the top of this page.
Notify you by email or through a notice in the dashboard, where appropriate.

Your continued use of the Service after a material change takes effect constitutes your acceptance of the updated policy. If you do not agree with a change, you may close your account.

15. Contact

Questions or requests about your privacy? Email [email protected].

SlashLink is operated by Slash Make LLC, United Arab Emirates.