1. Information We Collect
We collect account credentials (username, salted PBKDF2 password hashes, 2FA secrets) and operational click telemetry (anonymized IP country, device type, browser, referrer) to provide analytics to link creators.
2. Data Protection & Security
Passwords are cryptographically hashed using PBKDF2-SHA256 with unique salts. 2FA utilizes RFC 6238 TOTP with 10 single-use emergency backup codes.
3. Cookies & Session Storage
We use secure HTTP-Only session cookies (w8_session) solely for authentication persistence. We do not use third-party tracking cookies.