§1. Information We Collect
When you create an account on flexbio.link, we collect the following personal information:
- Account data — email address, username, display name, and password (securely hashed with bcrypt)
- Profile data — biography text, links, uploaded images, customization preferences, and badge configurations
- Discord data — Discord user ID, username, avatar, and access token (when you connect via OAuth)
- Usage data — profile views, link clicks, visitor device type, browser, and approximate location (country level)
- Technical data — IP address (for rate limiting and security), user agent, and session information
§2. How We Use Your Data
We use the information we collect for the following purposes:
- To provide, operate, and maintain the Service
- To display your public profile page to visitors
- To provide analytics and insights on your profile performance
- To authenticate your identity and secure your account
- To communicate important updates, security alerts, and service announcements
- To detect and prevent fraud, abuse, and violations of our Terms
- To display your Discord presence and activity on your profile
- To improve the Service based on aggregated, anonymized usage patterns
§3. Data Storage & Security
We take the security of your data seriously and employ the following measures:
- Passwords are hashed using bcrypt with a strong salt — we never store plaintext passwords
- All connections are encrypted with HTTPS/TLS
- Access to user data is strictly restricted to authorized personnel
- Session tokens are securely generated and stored as HTTP-only cookies
- We implement rate limiting to protect against brute-force attacks
While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
§4. Third-Party Services
flexbio.link integrates with the following third-party services:
- Discord — for OAuth login, presence display, and profile widget functionality. When you connect Discord, we receive and store your Discord user ID, username, and avatar. Discord's own privacy policy governs how they handle your data.
- Spotify — if you add a song to your profile, the embed is loaded from Spotify's servers
We do not sell, rent, or trade your personal data to any third parties. We do not use third-party advertising or tracking services.
§5. Cookies
We use essential cookies required for the Service to function, including session management and authentication. We do not use advertising or tracking cookies. For detailed information about our cookie usage, please refer to our Cookie Policy.
§6. Data Retention
We retain your personal data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain information. Anonymized analytics data may be retained indefinitely.
§7. Your Rights
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — update or correct inaccurate personal data
- Deletion — request deletion of your account and associated data
- Export — request a portable copy of your data
- Objection — opt out of analytics data collection
- Restriction — request that we limit how we process your data
To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.
§8. Children's Privacy
flexbio.link is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete their account and information.
§9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.
§10. Contact
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at [email protected].