Privacy Policy

01. Data Controller & Contact Information

The data controller responsible for personal data processed through the Speed Links website and licensing services is the operating team of Speed Links.

If you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Privacy & Support Email: support@speedlinks.app
• Website: https://speedlinks.app

02. Core Privacy Architecture: 100% Local-First

Speed Links was architected from day one under the principle of Privacy by Design:

• Local Browser Storage: All data generated inside the browser extension (bookmark titles, destination URLs, custom icons, group categories, and profile configurations) is saved strictly within your browser's local sandbox storage (chrome.storage.local and IndexedDB).
• Zero Link Tracking: Speed Links servers never receive, monitor, index, or store your bookmark URLs or browsing history.
• User-Controlled Backup & Portability: Exporting and importing your setup generates a standalone file on your local machine that is never uploaded to any cloud service unless you choose to move it yourself.

03. Information We Collect and How We Use It

We only collect the absolute minimum amount of information required to deliver and support our software:

A. Chrome Extension Usage

The extension itself collects no personal data, executes no behavioral tracking, records no keystrokes, and captures no screenshots.

B. License Purchases and Billing

When purchasing a lifetime license on our website:

• Email Address: We collect your email address to generate and deliver your UUID license key, process support requests, and send payment receipts.
• Payment Details: Payments are processed directly through Stripe (Stripe, Inc.), certified as PCI-DSS Level 1 compliant. Speed Links never sees, stores, or handles your full credit card number, expiration date, or CVV code.

C. License Activation & Installation Verification

When you enter your email and license key into the extension to activate your lifetime features:

• The extension securely transmits your email, license key, and an anonymous, locally generated installation identifier (Installation ID / device hash) to our verification API.
• Purpose: To authenticate license validity and manage your active installation seat count (starting with 3 installations according to your plan).

D. Server Logs and Technical Security

When you visit our website, our servers automatically log standard technical requests (IP address, user agent, timestamps) exclusively to maintain server stability, mitigate DDoS attacks, and prevent abuse.

04. Legal Bases for Processing (GDPR)

In accordance with the EU General Data Protection Regulation (GDPR Art. 6), we process your data under the following legal bases:

• Performance of a Contract (Art. 6(1)(b) GDPR): To issue, deliver, and manage your software license key and authenticate authorized installations.
• Legitimate Interests (Art. 6(1)(f) GDPR): To protect our infrastructure from malicious attacks, prevent software piracy, and provide customer support.
• Legal Compliance (Art. 6(1)(c) GDPR): To comply with mandatory statutory accounting, tax, and consumer protection records.

05. Third-Party Subprocessors & Data Transfers

We do not sell, rent, or trade your personal data. We only work with trusted service providers who assist us in operating our infrastructure:

06. Data Retention

• License and Purchase Records: Maintained for the active lifetime of your software license to allow you to manage and recover your keys, and as required by tax legislation.
• Server Security Logs: Retained for a maximum of 90 days, after which they are securely overwritten or deleted.

07. Your Legal Rights (GDPR, CCPA & International)

Depending on your location, you have several statutory rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer needed.
• Right to Restriction & Objection: Object to or request restriction of data processing.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• California Privacy Rights (CCPA / CPRA): California residents have the right to know what personal information is collected, request deletion, and not be discriminated against. We do not sell or share personal information with third parties for marketing purposes.

To exercise any of these rights, please contact support@speedlinks.app. You also have the right to lodge a complaint with your competent supervisory data protection authority.

08. Cookies & Tracking Technologies

Speed Links uses only essential, first-party technical cookies strictly required for website functionality (CSRF tokens, locale preferences, and active checkout sessions). We do not use advertising trackers, third-party analytics pixels, or remarketing beacons.

09. Data Security

We maintain appropriate technical and organizational safeguards to ensure data security, including SSL/TLS encryption for all HTTP communications, automated security patching, and isolated database storage.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations or application updates. Any updates will be posted on this page with an updated "Last Updated" date.