Legal
Privacy Policy
Last updated: May 13, 2026
ittybittylink, operated by Supply Surplus LLC (“we,” “our,” or “us”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and what choices you have.
1. Data We Collect
Account Information
- Email address (required to create an account)
- Username and display name
- Profile bio and avatar image (optional, set by you)
- Password (stored as a secure, salted hash — never in plain text)
Usage Data
- Click counts on your links (aggregated; we do not log individual visitor identities)
- Device type and browser category for analytics (e.g., “mobile / Chrome”)
- Approximate country of visitor (derived from IP, IP is not stored)
- Timestamps of link clicks and page views
- Email addresses collected via your email capture forms (stored and owned by you)
- Purchase history and download activity for digital products
Payment Information
- Stripe customer ID and connected account ID (references, not raw card data)
- Transaction amounts, timestamps, and platform fees
- Payout history
We never see or store your full card number, CVV, or bank account details. All payment data is handled directly by Stripe.
2. How We Use Your Data
- To operate your account and display your public profile page.
- To provide click analytics and revenue dashboards in your account.
- To process Earn Mode transactions and calculate platform fees.
- To send transactional emails (account confirmation, password resets, payout notifications).
- To deliver purchased digital products via secure download links.
- To investigate and resolve support requests.
- To detect and prevent fraud, abuse, and violations of our Terms of Service.
- To improve the platform through aggregated, anonymized usage analysis.
We do not sell your personal data. We do not use your data to train AI models. We do not send marketing emails without your explicit opt-in.
3. Data Sharing
We share data with the following third-party services to operate ittybittylink:
Stripe
Payment processing and Stripe Connect payoutsStripe processes all Earn Mode transactions. Your connected Stripe account is governed by Stripe's Privacy Policy.
Supabase
Database and authenticationYour account data, link configurations, analytics, and email subscribers are stored in Supabase-hosted databases in the United States.
Vercel
Web hosting and edge deliveryYour public profile pages are served via Vercel's global edge network. Vercel may process request metadata (IP, headers) transiently to route traffic.
Vercel Blob
File storage for digital product deliveryPurchased files are stored on Vercel's infrastructure and served via time-limited download links.
Resend
Transactional email deliveryWe use Resend to deliver account and notification emails. Your email address is shared with Resend for this purpose only.
We do not share your data with advertisers, data brokers, or any other third parties.
We may disclose data if required by law, court order, or to protect the rights and safety of our users or the public.
4. Cookie Policy
ittybittylink uses a minimal set of cookies and browser storage:
Authentication cookies
Set when you log in. Required for session management. These are first-party, HttpOnly cookies.
Preference storage
Your theme choice and dashboard preferences may be saved in localStorage on your device. No data is sent to us.
We do not use advertising cookies, tracking pixels, or third-party analytics cookies on your profile pages. Visitor analytics are collected server-side without cookies.
5. Your Rights and Choices
You have the following rights regarding your data:
Data export
Export all your data (links, analytics, email subscribers, earnings history) at any time from your dashboard in JSON format.
Account deletion
Delete your account from dashboard settings. Your public profile is taken offline immediately. All personal data is permanently deleted within 30 days, except where retention is required by law (e.g., financial records).
Correction
Update your account information at any time from your dashboard settings.
Opt-out of emails
Unsubscribe from any non-essential emails using the link in each email. Transactional emails (password resets, payout confirmations) cannot be opted out of while your account is active.
To exercise any of these rights or if you have a request we can’t fulfill through the dashboard, email us at support@ittybittylink.com.
6. Data Retention
We retain your account data for as long as your account is active. Analytics data (click counts, revenue summaries) is retained for up to 36 months and then aggregated or deleted.
Financial transaction records are retained for 7 years to comply with tax and accounting requirements, even after account deletion. This data is not associated with your public profile.
7. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- All data is transmitted over HTTPS/TLS.
- Passwords are hashed using bcrypt and never stored in plain text.
- Database access is restricted by row-level security policies.
- Payment data is handled exclusively by Stripe; we store only opaque references.
No system is completely secure. If you discover a security vulnerability, please disclose it responsibly to support@ittybittylink.com.
8. Children's Privacy
Users must be at least 18 years old to create an account, connect a Stripe account, or use Earn Mode features. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has created an account, please contact us at support@ittybittylink.com and we will delete the account promptly.
9. GDPR and CCPA Rights
If you are located in the European Economic Area or California, you may have additional rights under GDPR or CCPA respectively. These may include the right to access, correct, delete, or restrict processing of your personal data, as well as the right to data portability and to object to certain processing activities.
Contact us at support@ittybittylink.com to exercise these rights. We will respond within the timeframe required by applicable law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you by email at least 14 days before the change takes effect.
Continued use of ittybittylink after changes take effect constitutes acceptance of the updated Privacy Policy.
11. Contact
Questions or concerns about this Privacy Policy? Contact us at:
ittybittylink Support
support@ittybittylink.com