Privacy Policy

Account information. When you create an account, we collect your email address. If you sign in with Google or Apple, we receive your email address (and, only on your first authorization with Apple, your name if you choose to share it) from that provider instead of a password.

Content you save. When you save a link, we store the URL, and we fetch and process the page’s content to extract a title, description, images, category, the account that posted it (for example an Instagram handle and name), and structured details (like ingredients for a recipe, or price for a product). We store this extracted data, along with any notes or collections you create, and any tags you add. We don’t keep comments or other people’s account details from the posts you save. For places, we may show current details from a maps service when you open the card.

Photos you add. When you add a photo, we store it privately after removing its location and camera details. Only you can see it, unless you share that card. If you do, people with the share link can see the photo until you turn sharing off. We use the photo to extract a title, category, details and any text in it, and we store that extracted text with the card.

Feedback. If you send feedback, we store your message with your account email, the app version and whether you used the app or the website, so we can read it and reply. We email it to ourselves through our email delivery service so we can reply. Feedback is never sent to our AI service. If you delete your account, we keep the message without your email or account.

Usage data. We record which features are used — for example that a card was saved, a search was run or the app was opened — together with your account id and email address, whether you used the app or the website, the app version, the kind of device, operating system and browser (for example mobile, iOS and Safari — never their versions), and your approximate location (country, region and city), which is worked out from your IP address. Your IP address itself is not stored, and neither is the information your browser or the app sends to identify itself: we only work out those three labels from it. These records never include the content of your cards, links, notes, photos or searches. We use one small first-party cookie only to remember which campaign link, if any, brought you to DumpLinks; it holds no personal information and expires after 24 hours. When you visit our home page or our log-in and sign-up screens on the website without being signed in, we record that visit once, with only which page or screen it was on, the campaign’s source, medium and name if you came from a campaign link, that it was the website, whether it was opened in Instagram’s or Facebook’s in-app browser, the kind of device, operating system and browser, and your approximate location. For a limited time while we test our ads, we also record how that visit uses those pages: which page or screen you’re on, how far you scroll, how long the page is on screen, which buttons you tap, which example on the home page you open and which parts of it you tap, which sign-up fields you start filling in (never what you type) and which kind of error you see (never the message itself). These records share one random id for that page visit; they aren’t linked to you or to any account. The same goes for starting to sign up. We use them only to understand and improve DumpLinks. When you delete your account, we also ask the service to delete these records. We do not use advertising trackers. You can turn this off in Preferences → Privacy.

Session recordings on our website. If you’re outside the European Economic Area, the United Kingdom and Switzerland (worked out from your IP address; if we can’t tell where you are, we don’t record) and visit our home page or our sign-up and log-in screens on the website without being signed in, we record how the page is used: where you tap, how far you scroll and how long each step takes. All text, everything you type and all images are hidden in your browser before anything is sent, so a recording shows only the page layout and your taps and scrolls — never your name, email address, password or sign-in code. Recordings aren’t linked to you or to any account, include only the campaign link’s source, medium and name if you came from one, and are never made inside the app or once you’re signed in. Each recording is labelled with your country, worked out from your IP address on our server; your IP address itself is not stored or sent with it. Recordings are kept for up to 30 days and used only to improve these pages. To stop being recorded, tap “Opt out of recordings” at the bottom of the page: recording stops at once, and your browser remembers the choice. We also don’t record a browser that sends a Global Privacy Control signal.

We use your information to:

• Provide and maintain your account and saved links
• Automatically categorize and extract details from pages you save
• Power search across your saved links
• Let you organize links into collections
• Let you optionally share a specific saved link publicly via a shareable link (only links you explicitly choose to share are made public; your account and other saved links remain private)

To operate DumpLinks, we share limited data with these service providers, each acting on our behalf:

• Our database and authentication provider — also handles file storage
• Our hosting provider — for our website and application code
• An AI service we use to analyze and categorize the content of pages and photos you save, and to power search — this includes the text of any notes you add and the searches you type
• A web-scraping service we use as a fallback when a page’s content can’t be read directly (for example, some Instagram or heavily protected pages), to fetch the page’s public content on our behalf
• A maps service — receives the name and address of a place you save (or its place ID) to find it, and when you open that card, to show its current details such as opening hours, rating and phone number; never your account, email, notes or photos. We keep only the place’s ID.
• A product analytics service (hosted in the EU) — receives the usage records and the session recordings described above
• An email delivery service — for account-related emails (like sign-up confirmation), and to forward feedback you send us
• Google / Apple — if you choose to sign in with Google or Apple, they handle authentication and share your basic profile (email, and name if provided) with us

We do not sell your personal information to anyone.

We retain your account, saved links and photos until you delete your account. You can delete your account and all associated data at any time from the You tab in the app (Delete account). This immediately and permanently removes your saved links, photos, collections, notes, and account information. Deletion cannot be undone.

If you choose to share a saved link, anyone with that specific link can view the extracted content for that one link. Your notes and any personal annotations on that link are never included in a shared link. Shared links do not expose your account, email, or other saved links. When you send a shared link, the app you send it with (for example WhatsApp or Messages) may show a preview with the card’s title, a short description and its image. For photo cards the preview shows a DumpLinks image, not your photo.

DumpLinks is not directed at children under 13, and we do not knowingly collect information from children under 13.

You can request access to, correction of, or deletion of your personal information at any time by contacting support@dumplinks.co.

We may update this policy from time to time. We’ll update the “Last updated” date above when we do.

Questions about this policy? Email support@dumplinks.co.