Design X Develop LLC operates dxd.link. This policy explains what we collect, why we use it, who receives it, and the choices available to account holders and visitors.
We collect account details such as email, name, username, profile content, settings, support messages, and connected login provider identifiers. We store pages and blocks you publish. If you submit an email through a creator's lead form, we store the address, time, and consent disclosure for that creator. Stripe sends us customer, subscription, invoice, and payment-status identifiers; dxd.link does not receive full card numbers. If you connect Spotify and enable live now-playing, we store Spotify access and refresh tokens to refresh that display, and publish your current listening activity on your public profile. With analytics consent, we collect page views, link clicks, referrer, browser user agent, a pseudonymous visitor identifier, product interactions, device characteristics, and approximate location derived by PostHog. We do not store visitor IP addresses in our first-party page-view records.
We process account, content, authentication, and billing data to provide the service and perform our contract with you. We use limited technical data to secure the service, prevent abuse, troubleshoot, and protect our legitimate interests. We process optional first-party and PostHog analytics with consent. We retain and disclose information when necessary to comply with legal obligations, enforce agreements, or resolve disputes.
Creators control the content and purpose of their public pages. When you submit an email through a lead form, dxd.link stores it for the creator and lets the creator view and export it to a newsletter, CRM, or spreadsheet. The creator is responsible for later messages, exported copies, unsubscribe requests, and explaining any additional uses. Contact the creator about an exported copy and contact us about the copy stored on dxd.link.
Essential cookies support sign-in, security, and saved privacy choices. If a creator enables an 18+ age gate, we store a non-essential preference cookie (dxd.age_verified) remembering which pages you confirmed you are old enough to view, for up to 180 days. If you allow analytics, dxd.link sets a pseudonymous analytics cookie (dxd.sid) for up to one year and PostHog may use cookies or local storage to distinguish browsers and sessions. For visitors, analytics remains off until you choose Allow analytics through the Privacy choices control on public pages. Account holders accept this Privacy Policy when creating an account. Declining analytics does not disable core account or public-page features. We treat a recognized Global Privacy Control signal as a request to keep optional analytics disabled.
We do not sell personal information or use it for cross-context behavioral advertising. We disclose only the data needed to providers that run the service, including Railway for hosting, Resend for email, Stripe for payments, PostHog for consented analytics, GitHub or Google when you choose their respective login, Spotify when you connect Spotify and enable live now-playing, and infrastructure or professional advisers used for security, support, accounting, and legal compliance. We may also disclose information in a business transaction or when legally required.
dxd.link is operated from the United States, and our providers may process information in the United States and other countries. Where required, we rely on provider contractual safeguards or other lawful transfer mechanisms. Privacy protections in those countries may differ from those where you live.
Account content, first-party page analytics, and stored lead captures remain while the related page or account exists and are deleted from active systems when that page or account is deleted. Authentication tokens expire automatically. Stripe and our financial records may be retained as required for tax, accounting, fraud prevention, chargebacks, and disputes. PostHog data follows our configured project retention. Backups and provider systems may take additional time to cycle out deleted data.
Depending on where you live, you may request access, correction, deletion, restriction, objection, or a portable copy of personal information, withdraw consent, or appeal a denied request. Account holders can update profile data, download an account export, and delete their account in the product. Visitors can change analytics choices through the Privacy choices control on public pages. You may also contact us. We may verify your identity and retain information where an exception applies. You may complain to your local privacy regulator.
dxd.link is not intended for children under 16, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can investigate and delete it where appropriate.
We use administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, so we cannot guarantee absolute security. Please contact us promptly if you believe your account or data has been compromised.
Design X Develop LLC is responsible for privacy questions about dxd.link. Send requests or complaints to [email protected] with the subject PRIVACY REQUEST. We will respond as required by applicable law.