Privacy Policy

The short version

Download by Link is built to do one thing — let you paste links and download files — without making you sign up or surrender personal data. We don't require an account, we don't store the files you download, and we don't track you across the web.

What we collect

• Anonymous usage events. A randomly generated session ID (stored only in your browser's session), the links you paste in aggregate counts (not the URLs themselves stored against you), and download outcomes (success / failure / source domain / file type).
• Rate-limit metadata. We store a one-way SHA-256 hash of your IP address so we can enforce daily limits (200 files and 5 GB per day) and prevent abuse. We do not store the raw IP.
• Browser metadata. User agent string and referring URL (where you arrived from) to help debug issues and understand traffic sources.
• Pro waitlist email (optional). Only if you explicitly submit it. Used to notify you when Pro launches; you can ask us to remove it anytime.
• Contact form messages. Your name, email, subject, and message — only if you submit the contact form. Used to reply to your request.

What we don't do

• We don't store the files you download. They stream through our server straight to your device.
• We don't sell or share your data with third-party advertisers.
• We don't use third-party tracking pixels or ad networks.
• We don't require an account to use the free tier.

Third-party services

We use Google Search Console for SEO performance data, which involves a one-time HTML verification tag — it does not load JavaScript or set cookies. Backend hosting and database are provided by Supabase and Cloudflare; they process data on our behalf under their own privacy terms.

Data retention

Session and usage events are kept for up to 90 days, then aggregated and purged. Pro waitlist emails are kept until you ask us to remove them or until Pro launches and you decide whether to continue. Shared link batches expire after 30 days. Contact form messages are kept until we've resolved your request, then archived.

Your rights

You can request deletion of your waitlist email or any contact message by writing to us via the contact page. Because we don't require accounts, most usage data is already anonymous and not tied to you personally.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where reasonable, announce them in the product.