Privacy Policy

The short version

Bentolink collects the minimum needed to run your page and process manual GCash payments. We never sell your data. Visitor IP addresses are never stored raw, only a one-way salted hash, so we can’t reverse it to an IP even if we wanted to.

What we collect

• Account info: email, your Bentolink URL (slug/handle), display name, bio, avatar/cover photos, theme preferences.
• Payment info (manual GCash): the GCash reference number and receipt screenshot you submit when upgrading, so we can manually match it against your GCash payment and activate your plan. We never see your GCash password or account.
• Analytics: page views and link clicks on your page: device type, country (from your network, not GPS), and referring site. Visitor IP addresses are hashed (HMAC-SHA256 with a private salt) before storage; we never store a raw IP.
• Feedback/reports: if you use the feedback widget or report a page, we store your message, the page it relates to, and your email if you gave one.
• Signup safety signals: a hashed version of your signup IP and a normalized form of your email, used only to prevent trial abuse (e.g., someone creating many accounts from one email). These are never shown to anyone, including us, in raw form beyond the hash.

Cookies

We use exactly one cookie: an httpOnly session cookie that keeps you logged in. It isn’t readable by JavaScript and contains no tracking data. We don’t use advertising cookies, third-party trackers, or cross-site tracking pixels. That’s also why you won’t see a cookie-consent banner here: we don’t do the kind of tracking that requires one.

Who we share data with

We don’t sell your data. A small number of service providers process data on our behalf, strictly to run the product:

• Resend:delivers verification, password-reset, and account emails.
• Cloudflare:CDN, DDoS protection, and bot filtering in front of our servers.
• Sentry (if enabled): error tracking, to help us fix bugs. It never receives your password or payment details.

Your public profile

Anything you choose to put on your public Bentolink page (display name, bio, tiles, links, GCash number if you add one) is, by design, publicly visible. That’s the point of a link-in-bio page. Don’t put anything there you don’t want visitors to see.

Your rights (Philippine Data Privacy Act)

Bentolink operates from the Philippines, and we handle your personal data under the Data Privacy Act of 2012 (Republic Act No. 10173). As a data subject you have the right to be informed about how your data is used, to access a copy of it, to correct inaccurate data, to object to or withdraw consent for certain processing, to have your data erased or blocked where allowed, to data portability, and to be indemnified for damage caused by mishandling.

You can exercise most of these yourself from your dashboard (edit your profile, tiles, and theme). For full account deletion or a copy of your data, contact us (see below) and we’ll act on verified requests within a reasonable time. You also have the right to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.

How long we keep your data

We keep your account data for as long as your account is active. If you delete your account, we remove your profile and public page promptly. Some records may be kept for a limited time afterward where needed to run the service or meet legal obligations, for example already-anonymized analytics events (which only ever store hashed IPs) and GCash payment references needed for accounting.

Contact

Questions about this policy or your data? Use the feedback button on the site, or reach out through the contact details on our homepage.