Privacy policy

Last updated: 24 September 2026 · 中文版本

lnk.hk is run by Mikeneko Solutions (Hong Kong). This policy explains what we collect when you use the lnk.hk website, create a short link or open one, how we use it, and how you can see or delete it. Questions: [email protected]. If this English version and the Chinese version differ, the Chinese version applies.

1. What we collect

Account details: when you sign in with Google we receive your email address and Google account ID. You can add a first name, last name and company under Account.
Links you create: destination URL, short code, domain, expiry, link name and share-card settings. To help you recognise links, we read the destination page’s title.
Links made without signing in: to limit abuse we keep a salted hash of the creator’s IP address (never the raw IP) for the daily limit and delete it after two days. These links expire after 30 days. Your browser keeps a one-time claim token so that, after signing in, the links can move into your account.
Clicks: when someone opens a lnk.hk short link we record the time, a salted hash of the IP address (we don’t store the raw IP), the browser user-agent, the referring page and the country or region. This powers the link owner’s click stats and helps us detect abuse.
Payments: Pro payments are handled by Stripe. We never see or store your card number; we keep only the Stripe customer and subscription IDs and the subscription status.
Reports: what you submit through the report form, including your email if you give it.
Site usage: we use Google Analytics, which sets cookies, to understand how the site is used. The site also keeps your sign-in, theme and language choice in your browser (localStorage).

2. How we use it

To run the service: create and redirect short links, show click stats, make QR codes, and manage subscriptions and custom domains.
For safety: destinations are checked with Google Safe Browsing when created and again daily, and we review reports and disable links that break the terms.
To contact you about your enquiries, reports or important changes to your account.

We don’t sell your personal data or use it for direct marketing.

3. Service providers and where data is kept

We use these providers, so data may be stored and processed outside Hong Kong:

Google Cloud (Singapore region): hosting, database and click stats
Cloudflare: network delivery, protection and custom domains
Stripe: payments and subscriptions
Google: sign-in, Google Analytics and Safe Browsing

4. How long we keep it

Account details and links are kept until you ask us to delete your account. Click records are kept for stats and deleted with the account. Links made without signing in expire after 30 days. Reports are kept to handle them and prevent abuse.

5. Your rights

Under the Personal Data (Privacy) Ordinance (Cap. 486) you may ask to see and correct the personal data we hold about you. You can update your name and company under Account at any time, or email [email protected] to see, correct or delete your data and account. We may need to confirm your identity and will reply within a reasonable time.

6. Changes

We may update this policy. Significant changes are posted on this page with a new date above.