Privacy Policy
Last updated: November 14, 2026
1. Overview & Principles
NexoLink ("we", "our", or "the Platform") takes user privacy seriously. We engineer our URL resolution paths to operate with minimal data footprint, zero tracking beacons, and strict data protection practices.
2. Information We Collect
A. From Publishers (Account Holders):
- Email address and password hash for account authentication.
- Payment account identifier (e.g. PayPal email, bank account number, or crypto wallet address).
- API keys and origin domains for authorized API access.
B. From Link Visitors:
- IP prefix: We store hashed IP representations (
ip_hash) and /24 subnet masks for rate-limiting and fraud prevention; raw IP addresses are discarded after evaluation. - Country code provided by Cloudflare geolocation headers (
CF-IPCountry). - Browser User-Agent header and device classification (desktop vs. mobile).
- Passive anti-fraud signals (timing measurements, focus state, adblock status) collected to authenticate organic human interaction.
3. How Information Is Used
Collected data is used exclusively to:
- Resolve shortlinks and navigate visitors safely to intended destinations.
- Calculate publisher earnings based on verified organic views.
- Protect our platform and publishers against automated abuse, botnets, and DDoS attacks.
- Comply with applicable legal obligations and enforce our Terms of Service.
4. Cookies & Local Storage
Publishers: We use standard encrypted session cookies to keep you signed in securely.
Visitors: The hot path is stateless. Ephemeral step tokens are signed with HMAC-SHA256 and stored in session memory only for the duration of the multi-step reading session. We do not use persistent cross-site tracking cookies.
5. Data Sharing & Third Parties
We do not sell, rent, or monetize personal data to data brokers. Cloudflare acts as our front-line edge proxy. Destination URLs are checked via Google Safe Browsing API to protect visitors against phishing and malware.
6. Contact & Data Rights
If you have questions regarding this privacy policy or wish to exercise data access/deletion rights, please contact our privacy officer at [email protected].