Privacy Policy
Last updated November 2026
This policy explains what data plnk collects, why, who else handles it, and what you can do about it. We collect as little as we can, we don’t sell data, and we don’t show ads.
plnk is run by Vlăduț Voicu, an individual based in Suceava, Romania, who is responsible for your personal data (the “controller” under the GDPR). Questions or requests go to hello@plnk.bio.
1. What we collect
- Your account: your email address and sign-in details (password, or your Google account if you sign in with Google), and when you accepted the Terms.
- Your page: what you add to it (name, bio, photos, links, products and so on), your designs and your settings.
- Visits to pages: views and clicks on public plnk pages. See If you visit a plnk page.
- Subscribers: emails that visitors give a page’s sign-up form. We keep them for the page owner (see below).
- Messages to us: what you send through the support or report forms, with your email (and name, for reports).
- The Pro waitlist: if you ask to be told when Pro launches, we note that, where in plnk you asked, and your answer to “What do you want most from Pro?” if you give one.
- Payments (once Pro is on sale): handled by our payment provider. We see your plan and payment status, never your full card number.
2. Why we use it, and on what basis
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Run your account and host your page, photos and designs | Our contract with you (the Terms) |
| Account emails: security, payments, your domain going live | Our contract with you |
| One reminder email if you signed up but haven’t published your page yet | Legitimate interest: helping you finish what you started (sent once, never if you turned plnk’s emails off) |
| The Monday stats email (you can turn it off in Settings or from the email) | Legitimate interest: keeping you informed about your page |
| Visitor analytics shown to page owners | Legitimate interest: showing owners how their page does, without cookies |
| Keeping subscriber lists for page owners | On the page owner’s behalf (we’re their processor, see our Data Processing Terms) |
| The Pro launch email and your waitlist answer | Your consent, which you can withdraw at any time |
| Answering support messages; handling reports of illegal content | Legitimate interest; for reports, also our legal duties under the EU Digital Services Act |
| Keeping plnk safe: rate limits, spam and abuse checks, short server logs | Legitimate interest |
| Crediting the friend who invited you | Legitimate interest |
| Payment and tax records (once Pro is on sale) | Legal obligation |
Where we rely on legitimate interest, you can object at any time (see section 8). We make no automated decisions about you that have legal or similar effects.
3. If you visit a plnk page
- What is recorded: that the page was viewed or a link was tapped, roughly which country you’re in, and where you came from (for example Instagram or a website). To count visitors without cookies, we combine your IP address and browser into a daily, keyed code that changes every day and can’t be turned back into your IP address. We never store your IP address.
- No cookies from plnk are set on public pages.
- Videos and music players a page owner adds (YouTube, Vimeo, Spotify, Apple Music) are loaded from those companies when you open the page, so they receive your IP address and may set their own cookies, under their own privacy policies. We use YouTube’s privacy-enhanced mode and Vimeo’s do-not-track mode to keep this to a minimum: Google/YouTube, Vimeo, Spotify, Apple.
- If you subscribe to a page, your email goes to that page’s owner, who decides how to use it and is responsible for it. We store it for them and don’t email you ourselves. To unsubscribe or ask about your data, contact the page owner, or write to us and we’ll pass it on.
- Links on a page lead to other sites with their own privacy policies.
4. Who else handles data
We use a few providers to run plnk. They only process data to provide their service to us, under their terms and data processing agreements:
| Provider | What for | Where |
|---|---|---|
| Vercel | Hosting the website | Servers in Frankfurt, Germany; content delivered worldwide (US company) |
| Neon | Database | Frankfurt, Germany |
| Clerk | Sign-in and accounts | United States |
| Sign in with Google, if you choose it | United States | |
| UploadThing | Storing photos you upload | United States |
| Resend | Sending emails | United States |
| Stripe | Payments, once Pro is on sale | Ireland and United States |
When data goes to the United States, it’s protected by the EU-US Data Privacy Framework where the provider is certified, and otherwise by the European Commission’s Standard Contractual Clauses in the provider’s data processing agreement. We share data with authorities only when the law requires it.
5. Cookies
plnk’s own cookies are only the ones needed for something you asked for. None of them track you or are used for ads. Players embedded on pages (see section 3) are run by their providers, who may set their own cookies.
| Cookie | What it does | How long |
|---|---|---|
| Clerk (__session, __client_uat and similar) | Keeps you signed in | While you’re signed in |
| plnk_tz | Shows your analytics in your time zone | 1 year |
| plnk_ref | Remembers who invited you, so they get credit when you join | 30 days |
| plnk_claim | Remembers the page name you picked before signing up | 1 day |
| plnk_pro_card | Remembers you hid the “Pro is coming soon” card | 1 year |
| plnk_pro_intent | Remembers you asked to hear about Pro before signing up | 30 days |
6. How long we keep it
- Your account, pages and subscribers: until you delete them. Deleting your account removes your pages, subscribers, analytics and photos. Backups roll over and are gone within about 30 days.
- Detailed visit and click data: 3 months on Free, 24 months on Pro. After that only daily totals are kept (counts per day, with no visitor codes), for as long as the account exists.
- Support messages and reports: up to 2 years, so we can follow up and spot repeated abuse.
- The Pro waitlist: until we’ve sent the launch email and the founding offer has ended, or until you ask us to remove you.
- Payment and tax records: as long as tax law requires (in Romania, usually 10 years).
7. Security
Everything travels over encrypted connections, access to data is limited to the person who runs plnk, and our providers keep data on secured, monitored systems. If a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
8. Your rights
You can export your data (account, page and subscribers) at any time from Settings, and delete your page or your whole account from Settings too. Under the GDPR you also have the right to access, correct, erase, restrict or receive your data, to object to how we use it, and to withdraw consent at any time. Email hello@plnk.bio and we’ll reply within a month. You can also complain to a data protection authority: in Romania, the ANSPDCP (dataprotection.ro), or the one where you live.
9. Children
You must be at least 16 to create a plnk account. We don’t knowingly collect data from children under 16; if you think a child has made an account, tell us and we’ll delete it.
10. Changes
We’ll update this page when what we do changes, and change the date at the top. If a change matters, we’ll tell account holders by email before it takes effect.
11. Contact
Privacy questions or requests? Email hello@plnk.bio.