Privacy Policy
Last updated: 2 November 2026
Template notice for the operator: set your contact email and legal name in Admin → Platform settings, and have these texts reviewed by a lawyer before launch.
What we collect
- Account: email, username, password (stored only as a salted hash), and if you use Google sign-in, your Google account ID and email.
- Your site: everything you add in the editor and the files you upload.
- Social: your friends and friend requests, and when you were last active (used for the “online” dot, which you can hide).
- Billing: your subscription status from Stripe. Card details go straight to Stripe — we never see or store them.
- Security: sign-in sessions with IP address and browser, failed sign-in attempts, and an audit log of sensitive actions.
Why
To run your account and site (contract), keep VALINK secure and prevent abuse (legitimate interest), handle payments and taxes (legal obligation), and send you the emails you choose in Settings (consent, which you can withdraw).
Who processes it
Amazon Web Services (file storage, email delivery), Stripe (payments), Google (only if you use Google sign-in), Cloudflare (network and security) and our hosting provider. They process data only on our instructions.
What's public
Your published site is public unless you make it unlisted or private. Your friends list follows your friends-visibility setting. You can stop search engines from listing your site in Settings.
How long we keep it
For as long as your account exists. When you delete your account, your data and uploads are deleted; billing records are kept as long as tax law requires, and backups roll over within 30 days.
Your rights
You can access, correct, export (Settings → Download my data) and delete (Settings → Delete account) your data, object to processing and complain to your data protection authority. For anything else, contact the contact email set by the site owner.
Cookies
See the Cookie Policy. We use no advertising or tracking cookies.