Privacy Policy

We keep:

• Your email address and password (stored only in scrambled, hashed form), to log you in.
• Your username and everything you add to your pages: name, bio, photos, links, settings.
• Your plan and payment history: the plan, amount, currency and payment status. We never see or store wallet keys or card details.
• If you connect a custom domain: the domain name.

We use this only to run winki.bio for you, keep it secure, and contact you about your account.

We count views and link clicks so creators can see what works. For each one we keep only the country, the type of device (phone, tablet or computer), the browser or app, and the site or app the visit came from.

• No cookies are set on creator pages.
• We don't store IP addresses, names, or anything that identifies a visitor.
• To stop fake and repeated counts, we keep a scrambled code made from the IP address, browser and date, for up to two days. It changes every day and can't be turned back into an IP address.
• Your browser keeps a few short-lived notes in its own session storage: that it already counted your view, that you confirmed an 18+ notice, and which app you came from. They disappear when you close the tab.

We keep the reason and any note you write. We don't record who sent the report.

• When you're logged in, login cookies keep you signed in. They're needed for the dashboard to work.
• If you type a username on our homepage, a cookie remembers it for one day so you can finish signing up with it.
• If you arrive through a creator's invite link or the “Made with winki.bio” link on their page, a cookie remembers that creator's username for 30 days. If you sign up, we note who invited you, so they can get their reward.

We don't use advertising or tracking cookies.

These providers process data for us, only to provide their part of the service:

• Supabase: database, logins and file storage.
• Vercel: hosting. It sees visitors' IP addresses to deliver pages and tells us the country; we don't store the IP.
• NOWPayments: cryptocurrency payments for paid plans.
• Our email provider: sending login codes and account emails.

Some of these providers process data outside the UK, with the safeguards UK data protection law requires. We don't sell your data.

• Account and page data: until you delete your account. Deleting it removes your pages, photos, voice notes and stats straight away.
• View and click counts: as long as the page they belong to exists.
• Payment records: deleted from winki.bio with your account. NOWPayments keeps its own records of crypto payments, as the law requires it to.

You can contact the person responsible for your data at support@winki.bio. You can delete your account and everything in it yourself, under Account in your dashboard. You can also ask to see, correct, export or delete your data, or object to how we use it. Email support@winki.bio and we'll answer within 30 days. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority in your own country.

winki.bio is only for people aged 18 or older. If we learn a child has an account, we delete it.

If we change this policy, we'll update the date at the top, and tell account holders about important changes.