Privacy Policy

Last updated November 12, 2026Applies to the Linklet bot, API, and this policy site

Linklet uses information to run its Discord bot and link generation API. This page explains what the service receives, where files may be sent, and how long temporary job information is kept.

1. Overview

Linklet is operated by the Linklet project owner, Extreem. It is a Discord bot and optional API for generating hosted links from files or other inputs you submit. Some features publish content through third-party hosting providers. Those providers handle information under their own terms and privacy policies.

This policy covers the Linklet bot, its API, and this static policy site. It does not cover Discord, hosting providers, or other websites you visit through a generated link.

2. Information Linklet handles

The exact information depends on which command or API feature you use. It can include:

Discord details: your Discord user ID, username, server and channel IDs, command choices, and information needed to reply to you or apply usage limits and access levels.
Files and generation details: file bytes, file name, file type, requested provider, requested quantity, and the links or error messages produced by a request.
API and dashboard details: your Discord profile ID, username, display name, avatar reference, request body, generated job ID, job status, timestamps, and results. API keys are shown once and stored only as cryptographic hashes. Do not put an API key in a URL.
Server settings: server IDs, selected channels, and related settings when a server administrator configures Linklet features.
Operational records: error details and diagnostic information needed to keep the service working. The bot's hosting provider may also receive connection and request data, such as an IP address, time, requested path, and response status, in its service logs.

The policy site does not use advertising trackers or analytics scripts. GitHub Pages hosts the static site and Cloudflare operates the API gateway and key database. Those providers may process connection data under their own privacy policies.

3. How information is used

Linklet uses information to receive and process your request, deliver a response or generated link, check API access, apply usage limits, operate server settings, prevent abuse, troubleshoot errors, and maintain the security and reliability of the bot and API.

Linklet does not use submitted files to build advertising profiles. The service does not sell personal information.

Information is shared only as needed to provide the feature you choose, keep the service running, or comply with a legal obligation. Depending on the feature, this can involve:

Discord, which delivers commands, attachments, and replies. Discord's own Privacy Policy applies to its services.
Cloudflare, which operates the public API gateway, rate limiting, encrypted secrets, and API-key database.
Infrastructure hosting providers, which run private generation services and may process operational logs.
GitHub, Cloudflare, Surge, Google Apps Script or Google Drive, Padlet, Uploadcare, and ImageKit, when one of those providers is selected to publish a file or create a link.
Reverse-IP or filter-check providers, when you use a feature that makes those lookups. The lookup input needed for the request is sent to that provider. The reverse-IP provider and filter-check endpoint can be changed by the operator, so the provider used may differ by deployment.

For file-hosting features, the file and related metadata are sent to the provider selected for that request. A generated URL may be accessible to anyone who has it, and the provider may retain or serve the file under its own rules. Review the provider's terms before uploading sensitive material.

Linklet may also disclose information if reasonably needed to respond to a valid legal request, protect the service or another person's safety, investigate abuse, or enforce the Terms of Service.

5. Retention

Temporary API job records are held in memory. Completed or failed job results are scheduled to expire after one hour. Active jobs expire after 24 hours. A process restart clears in-memory job records sooner. Files may remain in a processing queue briefly while a request is being handled.

Dashboard account records and hashed API keys are retained while your account remains active. Revoked key records and rate-limit counters may be retained for security and abuse prevention. Some Discord usage counters and server settings may also be saved so limits and server features continue to work after a restart.

Once Linklet sends a file to a hosting provider, that provider controls its copy and may keep it until it is deleted or removed under the provider's rules. Discord messages and attachments are also subject to Discord's retention and deletion controls. Hosting and diagnostic logs are retained according to the relevant provider's practices.

6. Security

Linklet uses access checks for the API and keeps provider credentials in server configuration rather than returning them in API responses. No online service can guarantee perfect security. Keep API keys private, use secure connections, and rotate a key if you believe it has been exposed.

7. Your choices and requests

You can stop using Linklet, remove it from a server through Discord's controls, revoke or rotate your API key from the dashboard, and ask the server administrator to remove Linklet-managed settings or access records where practical.

Depending on where you live, privacy law may give you rights to request access, correction, deletion, or other handling of personal information. Send a request to the Linklet administrator in the Discord server where you use Linklet, or to the person who issued your API access. We may need enough information to verify the request. Some records may need to be kept for security, legal, or operational reasons.

8. Age requirements

Linklet is provided through Discord and is not intended for anyone who is below the minimum age required by Discord or the law that applies to them. Do not use Linklet if you are not old enough to use Discord where you live. See Discord's Terms of Service.

9. International use

Linklet and its providers may process information in countries different from the country where you live. Those countries may have different data protection rules. Provider policies explain their own processing and transfer practices.

10. Changes and contact

This policy may change as Linklet features or providers change. The date at the top shows when it was last updated. Continued use after an update means the revised policy applies to future use, subject to any notice required by law.

For a privacy question or request, contact the Linklet administrator in the Discord server where you use the bot, or the person who issued your API access. See also the Terms of Service.