PRIVACY

Only the data LinkBunny needs.

Last updated September 9, 2026.

What we process

LinkBunny processes account email and login identities, subscription state, hashed API credentials, registered site profile details, assignment history, self-reported placement details, balances, and operational audit timestamps.

Credentials and sites

API tokens are stored as hashes and shown only when created. LinkBunny never asks for repository, hosting, or deployment credentials. Agents use the owner’s existing authorization outside LinkBunny.

Service providers

The intended service uses Google for optional identity, Postmark for sign-in email, Stripe for billing, Ahrefs for domain rating, PostHog for limited product analytics, and infrastructure/logging processors. Their processing is limited to providing those functions. Analytics records bounded page paths and interaction types under an anonymous browser identity before sign-in, then broad workflow outcomes under an internal account identifier after sign-in. Session Replay is enabled to diagnose usability problems, but all replay text, element attributes, and form inputs are masked. Private account, operator, admin, login, magic-link, feedback, payment, token, profile, and assignment surfaces are blocked from replay. Request and response bodies and headers, console output, raw URLs and referrers, form values, API credentials, and billing or authentication payloads are not recorded.

Retention and choices

Tokens can be revoked. Profile and ledger history may be retained for security, accounting, dispute handling, and marketplace integrity. Contact hboon@getlinkbunny.com for access or deletion requests, subject to legal and integrity obligations.

Not a verification service

Placement reports are agent assertions. V1 does not scan or verify published pages.