Privacy policy
Last updated 2026-10-29
Who we are
Linkmintly is operated by HQK ADVERTISING - INTERIOR COMPANY LIMITED (CÔNG TY TNHH QUẢNG CÁO - NỘI THẤT HQK), tax ID 0318791829, 44/3G Hau Lan 1, Ba Diem Commune, Hoc Mon District, Ho Chi Minh City, Vietnam.
For click data on our customers' links, we process personal data on behalf of the customer who created the link: the customer is the controller and we are its processor, under the data processing terms in our terms of service. For our website, customer accounts, contact messages, abuse reports and security logs, we are the controller.
Link click data
When someone opens a short link on l.linkmintly.click or on a customer's connected domain, or a tracking link on go.linkmintly.click, we record for that click:
- date and time, the link and its destination;
- the country of the request, as determined by our network provider from the IP address;
- device type, operating system and browser family, derived from the user agent;
- the host name of the referring page, when the browser sends one (for example
facebook.com), and the first language of the accept-language header; - a visitor code used to count unique visitors per day: a keyed hash of the date, IP address and user agent that changes every day and cannot be reversed;
- whether the request came from a known bot, link preview or automated tool;
- for Google Ads tracking links: the advertising parameters in the tracking URL (such as campaign ID, keyword and Google click ID
gclid) and the click ID we generate (lmclid).
We do not store the visitor's IP address, full user agent or the full address of the referring page in our click database. If a tracking link has no valid account key, we store nothing about the visitor: we only add one to a daily count for the destination host, which helps us detect abuse.
Links set no cookies and run no scripts. The public preview page sets no cookies. We do not record what visitors do on the destination website.
Website, accounts and contact messages
- Account: your name, email address, company (optional) and password, stored only as a salted scrypt hash. We also store the IP address you sign up from, to investigate abuse.
- Links and domains: the links you create (destination, back-half, title, campaign, expiry, history of destinations) and the custom domains you connect, with the results of our DNS checks.
- Contact form and abuse reports: the details you send (name, email, company, website, plan of interest, message) and, for the contact form, the IP address the message was sent from, which we use against spam.
- Login protection: to stop password guessing, we count failed login attempts per IP address and per email address, and remember the IP addresses of your recent successful logins. This stays in server memory only and is discarded after at most 14 days or when the server restarts.
- Password reset: a link that works once and expires after 30 minutes; we store only a hash of it. The email shows the IP address the request came from.
- Emails we send: password reset links and a notice when your password has been changed. We send no marketing emails. Copies of contact messages and notices of new accounts and newly verified domains are emailed to our staff mailbox.
- Administration area and server logs: sign-in attempts to our staff area are recorded with IP address, time and result. Our web server logs each request (IP address, time, URL, status, referrer, user agent) for security and troubleshooting.
Our pages load no third-party scripts, fonts, analytics or advertising tags.
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
__Host-sid | Keeps you logged in. Strictly necessary; set only when you log in or sign up. | 14 days, or until you log out |
tzo | Your time-zone offset in minutes, so the dashboard shows dates in your local time. Contains no identifier. | 1 year |
We use no advertising or analytics cookies. Short links, tracking links and preview pages set no cookies.
Purposes and legal basis
- Link click data: processed only on the customer's instructions, to show the customer analytics for its links. The customer is responsible for having a legal basis for it and for informing people who open its links.
- Account, link and domain data: to provide the service you signed up for (performance of our contract with you).
- Contact messages: to reply to your request.
- Abuse handling, login protection, IP addresses at sign-up and on contact messages, server logs and daily counts: to keep the service and the people who open links safe, and prevent fraud and abuse (our legitimate interest under the GDPR; under Vietnamese law, the protection of the service and of our users).
Where Vietnamese law requires your consent, we rely on the consent you give when you create an account or send us a message. You can withdraw it at any time by writing to us.
We never sell personal data, never use click data for our own advertising or profiling, and never combine one customer's click data with another's.
Service providers and other recipients
- Hostinger International Ltd. provides the virtual server that stores our data. The server is located in the United States.
- Cloudflare, Inc. provides DNS, TLS encryption, network protection and the country of each request for
linkmintly.click,l.linkmintly.clickandgo.linkmintly.click. Requests pass through Cloudflare's network, which processes IP addresses and request data in transit. - Our email provider processes messages sent to our addresses and delivers the emails we send.
- The customer who owns a link sees the analytics recorded for that link, and nobody else's.
- Authorities, only when the law requires us to disclose data, and the operators of affected services when we act on a report of phishing or malware.
International transfers
Because our server is in the United States and Cloudflare operates worldwide, personal data is transferred outside Vietnam and, for people in the European Economic Area, outside the EEA. We rely on our providers' data processing terms, which include the EU Standard Contractual Clauses where the GDPR applies, and follow the requirements of Vietnamese law on transferring personal data abroad.
Retention
| Data | Kept for |
|---|---|
| Link click data | 90 days after the click, then deleted automatically |
| Daily counts for tracking links without a valid key (no personal data) | 90 days |
| Links, their destination history and domains | Until you delete them or your account; deleting a link, a domain or your account immediately removes the related click data |
| Contact messages, including the sender's IP address | 12 months after we receive them |
| IP address at sign-up | 90 days |
| Login session | 14 days, or until you log out |
| Password reset links | Valid for 30 minutes and only once; deleted within 6 hours after they are used or expire |
| Copies of emails we send | 30 days; the content of a password reset email is erased as soon as it has been sent |
| Sign-in records of our administration area | 90 days |
| Web server logs | 14 days |
| Database backups | 14 days |
| Billing records for paid plans | As long as accounting and tax law requires |
Security
All traffic uses HTTPS. Passwords are stored as salted scrypt hashes and login sessions only as hashes of their tokens. The application runs in an isolated container with a read-only file system; administrative access is limited to our staff, requires two-factor authentication and is protected against password guessing.
Your rights
Under Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and its implementing Decree 356/2025/ND-CP, and, where it applies to you, the EU General Data Protection Regulation (GDPR), you have the right to be informed, to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to withdraw consent, to data portability where the GDPR provides for it, and to complain.
Write to privacy@linkmintly.click. We reply without undue delay and in any case within 30 days. You can also delete links, domains or your whole account yourself at any time.
If you opened a link and want your click data accessed or removed, contact the owner of the link, or contact us and we will help. Because we do not store IP addresses, we usually cannot single out one person's clicks.
You can lodge a complaint with the competent data protection authority: in Vietnam, the Ministry of Public Security; in the EEA, the supervisory authority of the country where you live or work.
Children
Linkmintly accounts are for businesses and professionals. The service is not directed at children, and we do not knowingly collect account data from anyone under 18.
Changes to this policy
When we change this policy, we update the date at the top. If a change materially affects how we use your personal data, we tell account holders by email before it takes effect.
Contact
Privacy requests: privacy@linkmintly.click. Abuse reports: abuse@linkmintly.click. Postal address: HQK ADVERTISING - INTERIOR COMPANY LIMITED, 44/3G Hau Lan 1, Ba Diem Commune, Hoc Mon District, Ho Chi Minh City, Vietnam.