Privacy & Data Protection

Privacy Policy

Last Updated: August 17, 2026

Our Privacy Commitment

At WhoIsMe (whoisme.link), we believe in high performance and privacy-by-design. We do not sell, rent, or trade your personal information or your profile visitors' browsing habits to third-party ad brokers.

1. Information We Collect

We collect minimal information necessary to deliver, protect, and maintain your personal profile link:

Account Information

Your email address, unique profile handle, display name, and securely hashed passwords or OAuth identifiers.

Profile & Custom Content

Links, project cards, bio markdown, uploaded avatar and cover imagery, and custom theme presets you publish.

Privacy-Centric Analytics

Aggregated page views, referral sources, and link click counts. Visitor IP addresses are cryptographically hashed and never stored in raw form.

Security & Bot Telemetry

Cloudflare Turnstile challenge tokens and rate limit counters used exclusively to prevent brute-force and DDoS attacks.

2. How We Use Your Information

We process your data strictly for legitimate operational purposes:

To host, render, and publicly display your personal profile link to your audience.
To provide the live Profile Studio editor, draft preview, and theme customization tools.
To compute anonymous reach analytics (unique daily views, click distribution) for your creator dashboard.
To send essential transactional notifications (email verification, password reset links, security alerts).
To detect and mitigate spam, fraud, disposable email abuse, and platform security threats.

3. Cookies & Local Storage

WhoIsMe uses strictly necessary, privacy-respecting cookies:

Authentication Cookies: Secure, HTTP-only session tokens to keep you safely logged in.
Theme Preferences: Local storage flags to remember your dark or light mode preference.
No Third-Party Ad Cookies: We do not place marketing, retargeting, or behavioral tracking cookies on your device.

4. Third-Party Service Providers

We partner with trusted infrastructure providers who adhere to strict data security standards:

Hosting & Edge Delivery: Vercel (serverless compute & CDN edge caching).

Database & Object Storage: Supabase S3 / PostgreSQL for encrypted database storage and optimized media hosting.

Bot Mitigation: Cloudflare Turnstile for privacy-first bot detection without invasive CAPTCHAs.

Transactional Email: Encrypted SMTP transport for verification links and password recovery.

5. Data Retention & Your Rights (Account Deletion)

You maintain total control over your digital identity. You may edit, unpublish, or delete your content at any time directly through the dashboard.

When you choose to Delete Account in Account Settings, our automated pipeline permanently wipes your account record, public profiles, analytics history, and removes all associated images from storage.

6. Children's Privacy

WhoIsMe is not directed to children under the age of 13. We do not knowingly collect or solicit personal information from children. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately so we can remove the account.

7. Updates to This Policy

We may update our Privacy Policy periodically to reflect platform enhancements or legal requirements. We encourage you to review this page periodically for any updates.

Contact Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our team at:

support@whoisme.link