Design X Develop LLC operates dxd.link. This policy explains what we collect, why we use it, who receives it, and the choices available to account holders and visitors.
We collect account details such as email, name, username, profile content, settings, support messages, and connected login provider identifiers. We store pages and blocks you publish. If you submit an email through a creator's lead form, we store the address, time, and consent disclosure for that creator. Stripe sends us customer, subscription, invoice, and payment-status identifiers; dxd.link does not receive full card numbers. If you connect GitHub, we store a GitHub access token so contribution graphs on your public page can include private activity counts (counts only — not repository names or commit messages). If you connect Spotify and enable live now-playing, we store Spotify access and refresh tokens to refresh that display, and publish your current or recent listening activity on your public profile. If you connect Instagram and enable live latest-post, we store Instagram access tokens to refresh that display, and publish your latest Instagram media caption, media preview, and permalink on your public profile. On public pages we collect anonymous first-party page views and link clicks (referrer, browser user agent, device class, approximate country, and a pseudonymous visitor identifier) so creators can see audience stats. With optional product-analytics consent, PostHog may also collect product interactions, device characteristics, and approximate location. We do not store visitor IP addresses in our first-party page-view records.
We process account, content, authentication, and billing data to provide the service and perform our contract with you. We use limited technical data to secure the service, prevent abuse, troubleshoot, and protect our legitimate interests. We process anonymous first-party page analytics to provide creators with audience stats for their pages (legitimate interests / providing the service), and you can opt out through Privacy choices or a recognized Global Privacy Control signal. We process optional PostHog product analytics with consent. We retain and disclose information when necessary to comply with legal obligations, enforce agreements, or resolve disputes.
Creators control the content and purpose of their public pages. When you submit an email through a lead form, dxd.link stores it for the creator and lets the creator view and export it to a newsletter, CRM, or spreadsheet. The creator is responsible for later messages, exported copies, unsubscribe requests, and explaining any additional uses. Contact the creator about an exported copy and contact us about the copy stored on dxd.link.
Essential cookies support sign-in, security, and saved privacy choices. If a creator enables an 18+ age gate, we store a non-essential preference cookie (dxd.age_verified) remembering which pages you confirmed you are old enough to view, for up to 180 days. For anonymous first-party page stats, dxd.link sets a pseudonymous analytics cookie (dxd.sid) for up to one year unless you decline through Privacy choices or send a recognized Global Privacy Control signal. If you allow optional product analytics, PostHog may use cookies or local storage to distinguish browsers and sessions. Product analytics stays off until you choose Allow analytics. Account holders accept this Privacy Policy when creating an account. Declining analytics turns off first-party page stats and product analytics for that browser, and does not disable core account or public-page features. We treat a recognized Global Privacy Control signal as a request to keep first-party page stats and optional product analytics disabled.
We do not sell personal information or use it for cross-context behavioral advertising. We disclose only the data needed to providers that run the service, including Cloudflare for hosting and infrastructure, Resend for email, Stripe for payments, PostHog for consented analytics, GitHub or Google when you choose their respective login, GitHub when you connect GitHub so contribution graphs can include private activity counts on your public page, Spotify when you connect Spotify and enable live now-playing, Instagram (Meta) when you connect Instagram and enable live latest-post, and infrastructure or professional advisers used for security, support, accounting, and legal compliance. We may also disclose information in a business transaction or when legally required.
dxd.link is operated from the United States, and our providers may process information in the United States and other countries. Where required, we rely on provider contractual safeguards or other lawful transfer mechanisms. Privacy protections in those countries may differ from those where you live.
Account content, first-party page analytics, and stored lead captures remain while the related page or account exists and are deleted from active systems when that page or account is deleted. Authentication tokens expire automatically. Stripe and our financial records may be retained as required for tax, accounting, fraud prevention, chargebacks, and disputes. PostHog data follows our configured project retention. Backups and provider systems may take additional time to cycle out deleted data.
Depending on where you live, you may request access, correction, deletion, restriction, objection, or a portable copy of personal information, withdraw consent, or appeal a denied request. Account holders can update profile data, download an account export, and delete their account in the product. Visitors can change analytics choices through the Privacy choices control on public pages. You may also contact us. We may verify your identity and retain information where an exception applies. You may complain to your local privacy regulator.
dxd.link is not intended for children under 16, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can investigate and delete it where appropriate.
We use administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, so we cannot guarantee absolute security. Please contact us promptly if you believe your account or data has been compromised.
Design X Develop LLC is responsible for privacy questions about dxd.link. Send requests or complaints to support@dxd.link with the subject PRIVACY REQUEST. We will respond as required by applicable law.