Legal document
In effect since May 10, 2026. What we collect, why, and how to take back control of your data.
This Privacy Policy (the “Policy”) explains how LINQFOLIO SAS (“we,” “LINQFOLIO”) collects, uses, processes, and protects your personal data when you use our platform, LinQfolio (the “Platform”).
We are committed to respecting your privacy and protecting your data in accordance with Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) and French Law No. 78-17 of January 6, 1978, known as the “Data Protection Act” (Loi Informatique et Libertés).
We collect the following categories of data:
Your data is used for the following purposes:
Legal basis: Improving the Platform relies on our legitimate interest (Art. 6(1)(f) GDPR) in providing a reliable, high-performing service. Where we implement audience-measurement tools that require non-essential trackers, we apply the required consent rules.
Important: LINQFOLIO does not sell your personal data and does not transfer it to third parties for advertising or commercial purposes. Service providers may, however, process certain data on our behalf (hosting, security, support) under contracts governing data processing arrangements (see Sections 5 and 7.4).
The processing of your personal data relies on the following legal bases:
Method: each purpose is linked to a specific legal basis in our internal records of processing activities. The paragraphs below summarize the most common situations; where several bases are mentioned, the basis that applies depends on the nature of the processing involved (account, security, newsletter, optional trackers, etc.).
Where the law requires it (for example, for certain electronic communications or for trackers that are not strictly necessary), we obtain prior consent, granular where relevant, and you may withdraw it at any time without affecting the lawfulness of processing based on other grounds before withdrawal. Account settings and the cookie banner let you exercise these choices where available on the relevant Platform.
Processing is necessary to perform the Terms of Use and to provide the services.
We must process certain data to comply with our legal and regulatory obligations.
We process certain data in our legitimate interests, in particular the security of the Platform and the prevention of abuse.
In accordance with Articles 33 and 34 of the GDPR, in the event of a personal data breach likely to result in a high risk to your rights and freedoms, LINQFOLIO undertakes to inform you as soon as possible, and to notify the competent supervisory authority (the CNIL, France’s data protection authority) within 72 hours of becoming aware of the breach.
LINQFOLIO does not sell your personal data and does not transfer it to third parties for their own marketing or advertising purposes.
Data may be disclosed to service providers acting on our behalf and under our instructions (processors within the meaning of the GDPR), only to the extent necessary for the purpose pursued:
Your profile, reviews, write-ups, and lists are public by default and visible to other users. Your personal data (email, password) is never shared publicly.
Data is retained for the following periods:
Your account and your data are retained for as long as your account remains active.
Accounts inactive for more than 24 months may be deleted. A warning will be sent by email before deletion.
LINQFOLIO implements robust security measures to protect your data:
You are responsible for keeping your password confidential. Never share it. Report any unauthorized access immediately to support@linqfolio.com.
In accordance with Article 28 of the GDPR, LINQFOLIO ensures that its processors provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures. A data processing agreement compliant with GDPR requirements is entered into with each processor that has access to Users’ personal data.
We use cookies and similar technologies in accordance with the applicable framework (in particular the CNIL’s guidelines on trackers and the GDPR). Details by name, purpose, and legal basis are aligned with the Cookie Policy of the marketing website when you visit the relevant pages. We do not deploy third-party advertising cookies.
linqfolio-consent (local storage, exempt from consent): Purpose: remember your answer to the banner, whether you accepted or declined. Without this key, a refusal could not be remembered and you would be asked again on every page. Duration: 6 months, after which we ask again.
Every page view increments counters hosted on our own infrastructure, in Ireland: one row per day and per indicator, a number inside it. Nothing is written to your device — no cookie, no local storage key. No visitor or session identifier is created, no IP address is kept, no individual row exists, and nothing is passed to a third party.
This system therefore processes no personal data at rest: the result is anonymous from the moment it is written, since there were only ever numbers. It meets the conditions the CNIL sets for audience measurement exempt from consent — a single purpose, strictly anonymous results, a scope limited to our site alone, no cross-referencing.
Your IP address reaches our server, as it does for any web request, and is used only to limit automated replays. This mechanism neither writes nor logs it.
Google Analytics requires cookies and processing by a third party. The CNIL does not grant it the exemption described in 8.3: it is neither loaded, nor executed, nor contacted until you accept on the banner. Before you answer and after a refusal, your browser makes no contact with Google at all.
After acceptance, data is processed by Google Ireland Limited acting as a processor, with IP address anonymization. Advertising signals, ad personalization, and sharing with Google's advertising products stay denied at all times, including after you accept. The cookies are cleared immediately if you withdraw your consent.
The sign-up form uses no cookie. Your address, the page language, and the form's location are recorded with your request, on the basis of the consent you give by submitting it.
The links to our Instagram, TikTok, X, LinkedIn, and Discord accounts are plain outbound links. No pixel, share button, or embedded content from those platforms is loaded on the site: they only see you from the moment you click.
The Cookie Policy page shows your current answer on Google Analytics and lets you change it in one click, at any time. Withdrawal takes effect immediately and clears the _ga cookies already set. You can also delete all of the site's data from your browser settings.
The counters in section 8.3 come with no refusal option: they keep nothing about you, so there is no trace to access and none to erase.
Reminder: no advertising cookies; no transfer of data to advertising networks for their own purposes.
In accordance with the GDPR, you have the following rights over your personal data:
You may request a copy of the personal data we hold about you; we process the request within the timeframes set out in the GDPR (see Section 9.7).
You can correct or update inaccurate or incomplete data through your account settings.
You may request the deletion of your account and your personal data. See Section 6.2 for details on the retention of public content.
You may request that we restrict the processing of your data in certain circumstances.
You may request a copy of your data in a readable, structured format.
You may object to the processing of your data for certain purposes, in particular marketing.
To exercise your rights, write to dpo@linqfolio.com with, for example, the subject line: “GDPR Request, Right of Access,” “GDPR Request, Erasure,” “GDPR Request, Restriction,” etc. We respond without undue delay and, except in complex cases provided for by the regulations, no later than the applicable legal deadline (typically one month from the request, with the possibility of a reasoned extension).
LinQfolio hosts its data within the European Union to ensure GDPR compliance.
The Platform’s servers are hosted by Amazon Web Services (AWS), in the eu-west-1 region (Ireland), within the European Union. Your data is not transferred outside the EU, except where legally required.
Should a transfer outside the EU become necessary, we will implement appropriate safeguards (European Commission standard contractual clauses, adequacy decision) in accordance with Articles 44 to 49 of the GDPR.
The Platform is reserved for people aged 16 and over. No one under the age of 16 is permitted to create an account.
This age is higher than the threshold of 15 set by France under Article 8 of the GDPR and Article 45 of the Data Protection Act, below which consent to data processing must be given or authorized by the holder of parental authority. By setting the threshold at 16, LINQFOLIO does not need to obtain parental consent: all of its users validly consent on their own.
When LINQFOLIO becomes aware, through a report or by any other means, that an account is held by someone under 16: the account holder is informed by email of the reason for the closure, its effective date, and the option to obtain a copy of their content beforehand; at least fifteen (15) days elapse between this notice and the actual deletion, except where the safety of the person concerned requires immediate action; the profile, posts, comments, and messages are then irreversibly deleted, with only the data that the law requires us to keep being retained, for the period it provides for. The holder of parental authority may exercise the child’s rights at any time by contacting support@linqfolio.com and may lodge a complaint with the CNIL. This procedure applies without prejudice to the right to erasure set out in Article 17(1)(f) of the GDPR, which expressly covers data collected from a child.
For services offered directly to children within the meaning of the GDPR, specific rules may apply. For other users, the minimum age may be higher depending on the country; LINQFOLIO adjusts its age thresholds and mechanisms whenever applicable regulations require parental authorization or notice to holders of parental authority. If there is doubt about a user’s actual age, we may suspend the account while we carry out proportionate checks.
LINQFOLIO may amend this Privacy Policy to reflect legal, technical, or organizational developments.
This Policy was last updated on May 10, 2026.
For any question, GDPR request, or complaint: dpo@linqfolio.com. Please specify the nature of your request in the subject line (e.g., “Privacy,” “Exercising my rights,” “Processing complaint”) to help us route your case.
Acknowledgment or initial response: generally within two business days for routine requests; GDPR timeframes apply to the full response, as indicated in Section 9.7.
If you believe that your GDPR rights have not been respected, you may lodge a complaint with the competent supervisory authority: the CNIL (Commission Nationale de l’Informatique et des Libertés, France’s data protection authority), 3 Place de Fontenoy, 75007 Paris, France (www.cnil.fr).
A question about your data?