Security at linkthe.app

What we do

How we protect your data

Your account
- Passwords are stored hashed with bcrypt, never in plain text.
- Two-factor authentication with an authenticator app (Google Authenticator, Authy and others), plus backup codes in case you lose your device.
- Sign in with Google if you'd rather not keep a password with us.
- New accounts verify their email address.
- Sign-in, sign-up, password reset and two-factor attempts are rate-limited to slow down guessing.
Your connection
- Pages are served over HTTPS, and browsers are told to always use it (HSTS).
- Security headers help block clickjacking and content-type tricks in the dashboard.
- Sessions expire, and you're asked to sign in again when they do.
Payments
- Subscriptions are handled by our payment provider, Lemon Squeezy.
- Your card details go to the provider, not to us. We never see or store card numbers.
- Invoices are available in your dashboard.
Your data
- You can export your leads as a CSV at any time.
- You can delete your account yourself, confirmed with a one-time code sent to your email. Your personal details are anonymised.
- Lead forms only collect the fields you choose to ask for.
- A cookie notice is shown on our public pages.
Access by our team
- Actions taken by our team in the admin console are recorded in an audit log.
- We only ask you for the details we need to help you with a support request.

Your part

Most account problems start with a reused or leaked password. A few habits make a big difference:

Turn on two-factor authentication in Settings.
Use a strong password that you don't use anywhere else.
Sign out on shared computers and devices.
Be careful with links and emails that ask for your password. We will never ask for it.

Found a security problem?

If you believe you've found a vulnerability, please tell us before sharing it publicly. Describe what you found and how to reproduce it, and we'll look into it as quickly as we can.

info@linkthe.app

This page describes our practices in general terms. Our privacy policy explains how we handle personal data.

How we protect your data

Your account

Your connection

Payments

Your data

Access by our team

Your part

Found a security problem?