Security at LinkSafe
This page is maintained by LinkSafe to answer common security and privacy questions about the Service. It is not an independent certification and is not audited by a third party.
Security is a shared responsibility: LinkSafe operates the platform, our hosting provider operates the infrastructure, and you are responsible for protecting your account credentials and the content you choose to make public.
Authentication and access
- Email + password sign-in, and Google OAuth.
- Session tokens are handled by our authentication provider and stored in secure browser storage.
- Every table with user data uses row-level security so users can only read and write their own rows.
- Passwords are never stored in plain text and are never accessible to LinkSafe staff.
Hosting and platform
- Application and database hosted on Lovable Cloud, backed by Supabase.
- Serverless runtime on Cloudflare Workers with global edge distribution.
- All traffic served over HTTPS with TLS 1.2+.
- Data at rest is encrypted by the hosting provider's default disk-level encryption.
Data collection and use
- LinkSafe stores references to third-party links — URLs, titles, notes, tags, and metadata you provide — not copies of the linked pages.
- AI enrichment sends public page metadata to a large language model to suggest a category and tags. Your content is not used to train third-party models.
- Full detail is in our Privacy Policy.
Subprocessors
- Lovable Cloud (Supabase) — hosting, database, authentication.
- Stripe — payment processing.
- Google (Gemini via Lovable AI Gateway) — AI enrichment.
See the Data Processing Addendum for the current list.
Deletion and export
- Export your data as JSON or HTML bookmarks from Settings → Data at any time.
- Deleting your account removes your data within 30 days, except records we must retain by law.
Vulnerability reporting
Found a security issue? Please email hello@linksafe.io with the details. We will acknowledge receipt within two business days and keep you updated as we investigate.
Incident contact
For urgent incidents affecting your account or data, email hello@linksafe.io.