Privacy Policy

Last updated: April 4, 2026

1. Who we are

MistBio ("we") operates mistbio.lol, a link-in-bio platform. This policy explains how we collect, use, and share personal data when you use our website and services.

2. Data we collect

• Account data: email address, username, password hash, display name, bio, and profile media you upload.
• Usage and analytics: profile views, link clicks, approximate referrer URLs, and when available, coarse location derived from network headers (e.g. country).
• Technical data: IP address, browser type, and device information typical of web services, used for security and reliability.
• Support: information you send when contacting us.

3. How we use data

We use data to:

• Create and maintain your account and public profile.
• Show analytics to you in the dashboard.
• Send transactional emails (welcome, password reset, security notices, email change confirmations).
• Detect abuse, fraud, and protect the security of the service.
• Comply with legal obligations.

4. Legal bases (EEA/UK visitors)

Where GDPR applies, we rely on contract (providing the service), legitimate interests (security, analytics, product improvement), and consent where required (e.g. non-essential cookies or marketing, if offered).

5. Sharing

We use infrastructure and email providers (for example hosting on Vercel, database providers, and Resend for email) who process data on our behalf under agreements. We do not sell your personal data. We may disclose information if required by law or to protect rights and safety.

6. Retention

We keep account data while your account is active. Analytics events may be retained for a limited period for reporting. Backups may persist for a short additional window. When you delete your account, we remove or anonymize personal data within a reasonable time, subject to legal retention needs.

7. Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, and access controls. No method of transmission over the Internet is completely secure.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Contact us to exercise these rights. You may lodge a complaint with your local supervisory authority.

9. Children

The service is not directed at children under 13 (or the age required in your jurisdiction).

10. International transfers

If you access the service from outside the country where our servers are located, your data may be processed in other countries with appropriate safeguards where required.

11. Changes

We may update this policy and will post the new version here with an updated date.

12. Contact

Privacy questions: admin@mistbio.lol