Privacy Policy

At OiaTree, we respect your privacy. This policy explains what we collect, how we use it, and how we protect it.

1. Information we collect

• Account info: username, email, password (hashed), display name, bio, avatar.
• Links and content: the links you add to your public page.
• Click analytics: when someone clicks a link we record IP address, browser/device type, referring URL, timestamp, and country (derived from IP).
• Social login: if you sign in with Google or GitHub, we receive your provider user ID, email, name, and avatar URL — nothing more.

2. How we use your data

• Operating OiaTree (running your page, tracking clicks).
• Computing the analytics shown in your dashboard.
• Sending email notifications you've opted into (new device sign-in, link milestones, weekly summary).
• Preventing abuse and protecting the platform (rate-limiting, banning bad actors).

3. What we don't do

• ❌ We don't sell your data to anyone.
• ❌ We don't use ad cookies or third-party tracking pixels.
• ❌ We don't share your email with any marketing service.

4. Cookies

We use only two cookies:

• oiatree_sess — keeps you signed in (essential).
• oia_cookie_consent — remembers your cookie preferences.

Manage cookies from the Cookie Preferences page.

5. Your rights

• Export your data (CSV from analytics).
• Edit any info in your account at any time.
• Delete your account entirely (purges all your links and analytics).
• Unsubscribe from any email notification in Profile → Email Notifications.

6. Security

• Passwords are hashed with bcrypt.
• CSRF protection on every form.
• Prepared statements prevent SQL injection.
• Uploaded SVG files are sanitised against malicious content.

7. Children

The service isn't intended for users under 13. If we learn an account belongs to someone under 13, we'll delete it immediately.

8. Changes to this policy

If we change this policy, we'll update the "Last updated" date above and notify users by email for material changes.

9. Contact

For privacy questions, reach us via the contact form.