Privacy Policy

Effective April 17, 2026

This document is a plain-English summary of OrcLink's data practices. It is not legal advice. Operators using OrcLink for commercial traffic should have it reviewed by counsel for their jurisdiction (GDPR, CCPA, etc.).

1. Data we collect on each click

When a visitor resolves an OrcLink short URL, we record:

  • A hashed IP address (not the raw IP).
  • The user-agent string, plus parsed device / OS / browser names.
  • The referring URL, if the browser provides one.
  • Approximate geolocation (country, city) derived from the hashed IP.
  • A per-workspace visitor identifier stored in a first-party cookie namedLo_vid. If cookies are blocked we fall back to a daily fingerprint hash so visits within the same day can be counted once.

2. How we use it

  • Resolving the link to its correct destination.
  • Counting clicks and attributing conversions back to the workspace that owns the link.
  • Deriving a coarse visitor intent signal (Discovery / Considering / Ready to Buy / Fan) used to personalize which destination a link resolves to.
  • Rate-limiting abusive traffic.

3. Cookies and consent

Essential cookies (the visitor identifier above, the authentication session for logged-in users) are always set. Analytics, personalization, and marketing cookies are off by default and controlled from the consent banner on first visit. You can revisit your choices by clearing site data.

4. Shopify attribution

When a Shopify merchant connects their store, OrcLink writes the visitor identifier onto the cart as a note_attribute so the resulting order can be attributed to the original link. No card data, address, or customer email reaches OrcLink through this channel — attribution happens against an ID we assigned.

5. Data retention

Raw analytics events — clicks, conversions, bio-page views, and inactive visitor profiles — are purged on a nightly 90-day rolling window. Daily rollups used for long-range dashboards are retained beyond that. Workspace owners can request earlier deletion at any time.

6. Your rights

Depending on your jurisdiction you may have the right to access, correct, export, or delete personal data we hold about you. Contact [email protected] and we will respond within 30 days.

7. Changes

We will post material changes to this policy on this page with a new effective date. Continued use of OrcLink after a change constitutes acceptance.