This Privacy Policy explains how Yourseoboard LLC, [address] ("we"), the controller of personal data, processes personal data when you use backlinks.uk.app and the Backlinks API. Contact for privacy questions: support@uk.app.
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Email, name, password hash (never the password itself) | Account and sign-in | Contract, Art. 6(1)(b) | Until the account is deleted |
| Google account ID and email (if you sign in with Google) | Sign-in with Google | Contract, Art. 6(1)(b) | Until you unlink Google or delete the account |
| Passkey public keys and their names | Passwordless sign-in | Contract, Art. 6(1)(b) | Until you delete the passkey or the account |
| API keys (stored only as hashes), request counters per key and per day | Providing the API, limits and quotas, usage statistics in your account | Contract, Art. 6(1)(b) | Account lifetime; daily counters up to 13 months |
| Credit balance and history of purchases and grants; queried domains in our response cache (not linked to your account) | Billing of API calls; faster repeated answers | Contract, Art. 6(1)(b) | Account lifetime; cache up to 7 days |
| IP address and email of sign-in attempts | Protection against password guessing | Legitimate interest in security, Art. 6(1)(f) | 7 days |
| Plan, Stripe customer and subscription IDs, subscription status | Billing | Contract, Art. 6(1)(b); legal obligations, Art. 6(1)(c) | Account lifetime; accounting records as required by law |
| Web server logs (IP, time, URL, user agent) | Operation and security | Legitimate interest, Art. 6(1)(f) | Up to 14 days |
We do not receive or store card numbers: payments are entered on Stripe's pages. We do not sell personal data and do not use it for advertising or profiling.
Some of these providers may process data outside the EU/EEA; in that case transfers rely on adequacy decisions or the EU Standard Contractual Clauses.
We use only the cookies needed to run the site: a session cookie after you sign in and a cookie that remembers your interface language. There are no analytics or advertising cookies. Details: Cookie Policy.
Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. You can change most data yourself in your account. To exercise your rights write to support@uk.app; we answer within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in your country of residence.
Passwords are hashed with Argon2id, API keys are stored only as SHA-256 hashes, integration secrets are encrypted, the site works only over HTTPS, and sign-in is protected against brute-force attempts. Passkeys never leave your device.
The Service is not intended for children under 16, and we do not knowingly collect their data.
We may update this policy; the date above shows the current version. We will inform registered users about material changes by email or in their account.