Privacy
This page describes how LinkingOut handles information. The site operator should add their legal name, jurisdiction, and a monitored privacy contact, and set a retention schedule before launch. This summary is not legal advice.
What "anonymous" means here
Posting or commenting anonymously hides your name from other users, everywhere that post or comment is shown. It does not mean the platform has no record of who submitted it. Administrators can associate account activity and content with the account that created it.
Information stored
- Account details such as your name, email address, username, and optional profile photo. If you use email and password sign-in, the app stores a salted password hash, not your plain-text password. Google sign-in also creates account-linking data.
- Posts, comments, profile details, and the names or anonymous identities you choose to show with them. The app also stores feature-related records such as votes, reactions, saved posts, profile visits, reports, feedback, and notifications.
- For signed-in accounts, activity records can include the IP address, browser user-agent, and approximate city, region, and country associated with signup, login, password reset, post or comment creation, and content reports. Location is estimated from the IP address; it is not GPS data. IP addresses may also appear in hosting-provider request logs, depending on the host.
- Information you include in feedback or a concern report, including an optional contact email address.
Who can see what
- Other users see your posts and comments — and your name, unless you posted anonymously.
- Moderators can see content and the account that submitted it for review. Moderator-only accounts cannot view the IP and location activity logs.
- Administrators can see account details and activity logs, including IP address and derived location, for moderation, security, and abuse prevention.
Service providers
Depending on which features are enabled and used, information may be processed by the app's hosting and database providers, Google (sign-in and reCAPTCHA), Resend (password-reset email), GIPHY (GIF search), and Clearbit (company autocomplete). On non-Vercel hosting, the app sends an IP address to ip-api.com to estimate its location. Company search terms are sent to Clearbit. These providers process requests needed for their respective features and have their own privacy terms.
Retention and account deletion
This app currently has no automatic expiry for activity logs. Deleting an account clears its profile and sign-in details, but authored posts and comments remain and are shown as belonging to a deleted user. Activity logs and other related records may also remain. The site operator should set and publish retention periods and handle any applicable deletion requests.
Questions or privacy requests
Use the Feedback page to contact the site operator. Before launch, the operator should publish a monitored privacy contact and identify the applicable jurisdiction.