Privacy Policy

Last updated: October 5, 2026

1. Controller

The controller responsible for data processing on this website is:

Sebastian Kraus
Erasmus-Widmann-Str. 31
97990 Weikersheim
Germany

Phone: +49 171 2621391
Email: info@linktaste.com

2. Overview of Data Processing

LinkTaste ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our services, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Data We Collect

3.1 Information You Provide

  • Account information (name, email address)
  • Profile information and preferences
  • Payment and billing information (processed by our payment provider Freemius)
  • Communications with us (support requests, feedback)
  • Domains you add as projects and the pages and links our crawler reads from them

3.2 Information Collected Automatically

  • Usage data (features used, actions taken within the application)
  • Device information (browser type, operating system)
  • Log data (IP address, access times, pages viewed)
  • Authentication data provided by Clerk (our authentication provider)

4. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data based on the following legal grounds:

  • Contract Performance (Art. 6(1)(b) GDPR): Processing necessary to fulfill our service agreement with you
  • Legitimate Interests (Art. 6(1)(f) GDPR): For fraud prevention, security, and service improvement
  • Legal Obligation (Art. 6(1)(c) GDPR): To comply with legal requirements (e.g., tax regulations)
  • Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent for specific processing

5. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our internal-link analysis services
  • Process your subscription and transactions
  • Send service-related communications and updates
  • Email you when a crawl you started has ended (you can turn this off at any time in your account's notification settings)
  • Respond to your inquiries and provide customer support
  • Analyze usage patterns to improve our platform
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

6. Data Recipients and Third-Party Services

We share your data with the following categories of recipients:

  • Clerk (Authentication): User authentication and session management — US-based with EU data processing
  • Freemius (Payments): Payment processing and subscription management — US-based with SCCs
  • Hetzner (Hosting): Server infrastructure — Germany-based
  • ALL-INKL.COM (Email delivery): Sends our service emails, such as the notice that your crawl has ended. Germany-based
  • Embedding Providers: OpenAI (or another OpenAI-compatible provider) to compute text embeddings of crawled pages and their sentences for topic grouping and link suggestions
  • Google and Meta (Advertising): Ad conversion tracking and remarketing, only with your consent. See section 11

We do not sell your personal information to third parties. Data transfers to countries outside the EU/EEA are protected by Standard Contractual Clauses (SCCs) or other appropriate safeguards.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion:

  • Account data is deleted within 30 days
  • Billing records are retained for 10 years (German tax law requirement)
  • Anonymized analytics data may be retained indefinitely
  • Backup data is purged within 90 days

8. Your Rights Under GDPR

As an EU resident, you have the following rights:

  • Right of Access (Art. 15): Request a copy of your personal data
  • Right to Rectification (Art. 16): Correct inaccurate or incomplete data
  • Right to Erasure (Art. 17): Request deletion of your personal data
  • Right to Restriction (Art. 18): Restrict processing of your data
  • Right to Data Portability (Art. 20): Receive your data in a machine-readable format
  • Right to Object (Art. 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent (Art. 7): Withdraw consent at any time

To exercise these rights, contact us at info@linktaste.com. We will respond within 30 days.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
Website: www.baden-wuerttemberg.datenschutz.de

10. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (TLS 1.3) and at rest
  • Regular security audits and updates
  • Access controls and authentication mechanisms
  • Server hosting in Germany (Hetzner data centers)

11. Cookies and Advertising

11.1 Necessary

We use cookies and browser storage that the service needs to work: Clerk's authentication cookies keep you signed in, and your browser stores your cookie choice. These are strictly necessary (§ 25(2) TDDDG) and processed based on our legitimate interest in providing a functional website (Art. 6(1)(f) GDPR).

11.2 Advertising (only with your consent)

We advertise LinkTaste on Google and on Facebook and Instagram. To see which ads bring people to us, and to show our ads to people who have visited before, we use the tools below. They load only after you agree to them in our cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). They receive your IP address, browser and device details, the pages you visit here, the ad you came from, and these events: signing up, opening the checkout, and completing a purchase (with the plan and the amount). They do not receive your name, your email address or the content of your projects.

  • Google Ads (conversion tracking and remarketing): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Sets cookies such as _gcl_au for up to 90 days. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Google's privacy policy
  • Meta Pixel: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Sets cookies such as _fbp for up to 90 days. We and Meta are joint controllers for collecting and transmitting this data (Art. 26 GDPR, Controller Addendum); Meta alone is responsible for what it does with it afterwards. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-US Data Privacy Framework. Meta's privacy policy

You can withdraw or change your consent at any time, with effect for the future, under (also in the footer of every page). Withdrawing deletes the cookies these tools set on our domain.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we may also send you an email notification.

14. Contact Us

If you have questions about this privacy policy or wish to exercise your data protection rights, please contact us:

Sebastian Kraus
Erasmus-Widmann-Str. 31
97990 Weikersheim
Germany

Email: info@linktaste.com
Phone: +49 171 2621391