Betajust-follow.link is currently in beta testing — features may change and a few rough edges are still being smoothed out. Thanks for helping us shape it.
Legal information
Last updated: 25 June 2026
This page contains the legal information for just-follow.link: who operates the service, what we store on your device, what personal data we process, and your rights under EU law (GDPR, ePrivacy Directive).
Operator
What we store on your device
We use only storage that is strictly necessary to run the service, plus one preference you set yourself. We do not use analytics, advertising, or third-party tracking cookies.
| Name | Type | Purpose | Retention |
|---|---|---|---|
token | Cookie (HttpOnly, Secure, SameSite=Strict) | Authenticates your session after you log in. | 7 days, or until you log out. |
__bf_reloaded | sessionStorage | Ensures the page rerenders correctly after using your browser's Back / Forward buttons. | Cleared when you close the tab. |
ff-links-sidebar-width | localStorage | Remembers the width you set for the Links sidebar. | Until you clear your browser storage. |
ff-cookie-notice-dismissed-v1 | localStorage | Remembers that you've dismissed the cookie notice banner. | Until you clear your browser storage. |
All of these fall under the "strictly necessary" or "user input" exemptions of the ePrivacy Directive (Article 5(3)) and do not require your prior consent. We disclose them here for transparency.
Link previews (embedded third-party sites)
When you open one of your saved links in the split-view preview, we load that website directly inside a frame on the page. Your browser connects to that site exactly as it would if you visited it in a new tab: the site receives your IP address and browser information, and it may set its own cookies or other browser storage.
These are third-party cookies and content that we neither set nor control. They are governed by the privacy policy of the site you are previewing, not by this policy — we never read, receive, or share that data. Many sites also block embedding entirely, in which case nothing loads.
A preview only loads after you deliberately open a link you saved yourself, so no embedded site — and no third-party cookie — is ever loaded without your action. To avoid it, open the link in a new tab instead of the preview.
Error reporting
When something fails in your browser or on our server, technical details about the error (including your IP address and browser version) are sent to Sentry, our error-tracking processor, so we can fix it. Sentry does not set any cookies. The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in keeping the service running. Sentry retains this data for 90 days.
This error data is stored in Sentry's EU region (Frankfurt, Germany). Sentry is operated by Functional Software, Inc. in the United States; where data is accessed from outside the EU/EEA, that transfer is governed by the European Commission's Standard Contractual Clauses under our data-processing agreement with Sentry.
Payments
If you subscribe to a paid plan, the payment is handled by Paddle, our payment provider and Merchant of Record. You enter your billing details — name, billing address, country, and your card or other payment method — directly into Paddle's checkout. We never see or store your card number or your billing address. Paddle is the seller of record: it takes the payment, calculates and charges any applicable VAT, and issues your invoice.
On our side we store only what we need to run your subscription: the plan, its status, and the renewal or expiry date, linked to your account. The legal basis for this processing is the performance of our contract with you (Art. 6(1)(b) GDPR).
Paddle is operated by Paddle.com Market Limited (United Kingdom), which benefits from a European Commission adequacy decision, so this transfer requires no additional safeguards. Paddle's own handling of your payment data is governed by Paddle's privacy policy.
Personal data we process
If you create an account we store your name, email address, and a salted password hash. We use this only to authenticate you, send transactional emails (verification, password reset, two-factor recovery), and — on free-tier accounts — enforce usage limits. We never sell, share, or use this data for marketing.
We keep your account data for as long as your account exists. When you delete your account — or ask us to delete it — we erase your name, email address, and password hash; we retain minimal records only where the law requires it.
We do not use your data for any automated decision-making or profiling.
just-follow.link is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us their data, contact us and we will delete it.
Under GDPR you have the right to access, rectify, port, restrict, object to, or delete your personal data. To exercise any of these, contact us at the address below.
If you believe we have mishandled your personal data, you have the right to lodge a complaint with the Czech supervisory authority — the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), uoou.gov.cz.
Contact
Questions about privacy, data, or this policy? Reach out by email: