Privacy Policy

Last updated: 28 September 2026

This policy explains what personal data ChickenLink collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The data controller is x, x, x. For any privacy question write to x@chickenlink.org.

2. What we collect

If you create links (signed in with Google)

• From Google: your name, email address, profile picture and a Google account ID. We never see your Google password.
• Your links: the addresses you shorten, link names, courier, chicken messages, leaderboard choices, click counts and dates.
• Payments: what you bought, the amount and a Stripe payment reference. Card details go directly to Stripe and never reach us.

If you create links without an account

• Your links: the address you shortened, the link name, click count and dates. They are deleted 90 days after they expire.
• A scrambled IP address: we store a one-way hash of your IP address with each link, not the address itself. We use it only to limit how many links one visitor can create and to block abuse.
• Anti-robot check: the form may use Cloudflare Turnstile to tell people from bots. Cloudflare processes technical data about your browser for this check only.

If you only open short links

• We add 1 to the link's click counter. We don't store who clicked.
• A session cookie is used to avoid counting the same visit twice within 30 minutes.
• If you report a link, we store your report and a one-way scrambled version (hash) of your IP address, only to stop abuse of the report form.

Server logs

Our hosting provider keeps standard web server logs (IP address, date, page requested, browser) for security, for a limited time.

3. Why we use it (legal basis)

• Running the service you asked for (contract, Art. 6(1)(b) GDPR): your account, your links, payments and refunds.
• Keeping ChickenLink safe (legitimate interest, Art. 6(1)(f)): blocking abuse, limiting links without an account, anti-robot checks, handling reports, preventing fraud, security logs.
• Legal obligations (Art. 6(1)(c)): keeping payment and accounting records as required by Romanian tax law.

We don't sell your data, we don't show ads and we don't use tracking or advertising cookies.

4. Cookies

We use one essential cookie, cl_sess, to keep you signed in, protect forms and avoid double-counting clicks. It is deleted when you close your browser. Because it is strictly necessary, it doesn't need your consent. Our fonts are hosted on our own server, so no third party sees your visit.

5. Who else processes your data

• Google Ireland Ltd. – sign-in with Google.
• Stripe Payments Europe Ltd. (Ireland) – card payments and refunds. See Stripe's privacy policy.
• ROMARG SRL (Romania) – web hosting and database, in the EU.
• Cloudflare, Inc. – anti-robot check (Turnstile) on the form for links without an account, when enabled. See Turnstile's privacy notice.

Google and Stripe may transfer data outside the EU under the EU-US Data Privacy Framework or standard contractual clauses.

6. How long we keep it

• Account and links: until you delete them or ask us to delete your account.
• Links made without an account: deleted 90 days after they expire.
• Unpaid, abandoned orders: deleted after 2 days.
• Payment records: 10 years, as required by Romanian accounting law.
• Link reports: up to 12 months after they are closed.

7. Your rights

You can ask to access, correct, delete or export your data, to restrict or object to how we use it, by writing to x@chickenlink.org. We answer within one month. You can delete individual links yourself in My links. You can also complain to the Romanian data protection authority, ANSPDCP, or to the authority in your own EU country.

8. Children

ChickenLink is not for children under 16. We don't knowingly collect their data. If you think a child has created an account, contact us and we will delete it.

9. Changes

We will update the date at the top when this policy changes, and announce important changes on the site.

10. Contact us

For any question about your data or this policy, write to x@chickenlink.org.