Skip to content

Privacy Policy

Last updated: February 25, 2026

Lox ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our URL shortening and link-in-bio platform.

1. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Password (stored securely using one-way hashing)
  • Profile information you choose to provide

Link and Usage Data

When you create short URLs or Bio Pages, we store:

  • The destination URLs you provide
  • Custom slugs and link names
  • Folder and tag organization data
  • Bio Page content and design settings

Analytics Data

When someone clicks a short URL or visits a Bio Page, we collect:

  • IP address (used for geographic approximation, not stored long-term)
  • Browser type and operating system
  • Referring website
  • Approximate geographic location (country and city level)
  • Date and time of the visit

Technical Data

We automatically collect standard technical information including browser type, device type, and cookies necessary for the service to function.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Generate click analytics and reports for your links
  • Send service-related notifications (account verification, security alerts)
  • Detect and prevent spam, abuse, and malicious links
  • Enforce our Terms of Service

3. Information Sharing

We do not sell your personal information. We may share data only in these circumstances:

  • Service Providers – With trusted third parties who help us operate the platform (hosting, email delivery), bound by confidentiality agreements
  • Legal Requirements – When required by law, court order, or governmental authority
  • Safety – To protect the rights, safety, or property of our users or the public

4. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL)
  • Secure password hashing
  • Two-factor authentication (2FA) option for your account
  • Regular security audits and monitoring

5. Data Retention

We retain your account data for as long as your account is active. Click analytics data is retained for the duration of your subscription. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

  • Access your personal data through your account settings
  • Correct inaccurate information in your profile
  • Delete your account and associated data
  • Export your link data

7. Cookies

We use essential cookies to keep you logged in and remember your preferences (such as dark mode). We do not use third-party advertising or tracking cookies.

8. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us.