Privacy Policy

Atsme ('Atsme', 'we', 'us') is a link-in-bio service that lets you build a public page with your links and content, available at atsme.me. This Privacy Policy explains what personal data we collect, why we collect it, and what rights you have over it.

The service is operated by [OPERATOR NAME], which acts as the 'data controller' of your personal data. If you have any questions, contact us at [contact email].

Account data: your email address, your name, and a securely hashed version of your password. We never store your password in readable form.

Profile and page data: your handle (username), display title, bio, avatar image, social links, page appearance, and any content blocks you add. This information is published on your public page and is visible to anyone who has the link.

Technical data: when you sign in we store a session record that includes your IP address, browser and device information (user agent), and timestamps, so we can keep you signed in and protect your account.

Communications: if you email us, we keep that correspondence so we can respond to you and maintain a record.

To provide the service — to create and host your page, sign you in, and keep your account working (legal basis: performance of our contract with you).

To secure the service — to detect and prevent abuse, fraud, and unauthorised access (legal basis: our legitimate interest in keeping the service safe).

To communicate with you — to send account emails such as email verification and important service notices (legal basis: performance of our contract).

To comply with the law — to meet our legal and regulatory obligations (legal basis: legal obligation).

We only use strictly necessary cookies — specifically, the cookie that keeps you signed in to your account. Because these are essential to provide a service you have asked for, they do not require consent and we do not show a cookie banner.

We do not currently use advertising or analytics cookies. If we add analytics or tracking in the future, we will update this policy and ask for your consent where the law requires it.

We do not sell your personal data. We share it only with the service providers that help us run the service, and only as far as needed:

Cloudflare R2 — stores the images you upload, such as your avatar.

Resend — delivers transactional emails such as email verification.

Our hosting and infrastructure provider — runs the servers and database that operate the service.

We may also disclose data where required by law, or to protect our rights, our users, or the public.

Some of our service providers may process data outside your country, including outside the European Economic Area. Where that happens, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect your data.

We keep your account and page data for as long as your account exists. When you delete your account, we delete that data as described below. Residual copies may remain in our encrypted backups for a limited period before they are overwritten, and we may retain limited records where the law requires it.

Depending on where you live, you have rights over your personal data — including the right to access it, correct it, delete it, restrict or object to its processing, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email us at [contact email]. You also have the right to lodge a complaint with your local data protection authority if you are unhappy with how we handle your data.

You can delete your account at any time from your account settings (Settings → Account → Delete account). This permanently and irreversibly deletes your user record, your public page, all of your content blocks, and any media you have uploaded.

Deletion takes effect immediately. Any residual copies in our encrypted backups are overwritten within our normal backup cycle.

Anything you add to your public page — your handle, title, bio, avatar, and links — is publicly accessible to anyone who has the link. Please do not put sensitive personal information on your public page.

The service is not intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We take reasonable technical and organisational measures to protect your data, including hashing passwords and encrypting data in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will change the 'Last updated' date above, and we will notify you of material changes where appropriate.

Questions about this policy or your data? Email us at [contact email].