Privacy Policy

Effective date: 4 July 2026 (v1.3) Last updated: 6 November 2026

This policy explains, in plain terms, how personal data is handled when you use OfferLink - a hosted service for collecting quote requests, available at offerlink.me. It is written to meet our obligations under the EU General Data Protection Regulation (GDPR) and Polish data-protection law.

Who we are

OfferLink is run by Jakub Szwajka, a sole trader (jednoosobowa działalność gospodarcza, “JDG”) trading as OfferLink.

Address: ul. Bolesława Chrobrego 34 lok. 13, 50-254 Wrocław, Poland
NIP 8982277864 · REGON 522094050
For anything in this policy, or to exercise your rights: hello@offerlink.me

Our two roles

For some data we are the controller (we decide how it is used); for other data we are only a processor acting for a business that uses OfferLink.

We are the controller for operator/admin accounts and visitors to our website.
We are a processor for the request data (name, contact, description, photos) an end-customer submits through a business’s OfferLink form. There, that business is the controller - if you are an end-customer, contact the business you were dealing with to exercise your rights over that data. The processing terms are also described in our Data Processing Agreement.
On a business’s form you may also see links to that business’s own privacy policy and terms, if it has provided them. Those pages belong to the business, not to us; questions about them go to that business.

What we process, why, and on what basis

Operator accounts - email, name, language, sign-in identity. To create your account, sign you in, and run the service. Basis: performance of our contract with you (Art. 6(1)(b) GDPR).
Security & activity logs - session/token hashes and an actions log. To keep the service secure and accountable. Basis: our legitimate interest (Art. 6(1)(f)).
Basic statistics (every visitor, no consent needed) - our self-hosted Umami counts page views and a few named events (for example “request form started”) on our marketing site and in the OfferLink app, including hosted forms, galleries, quote pages, sign-in and the operator app. It receives the cleaned page address, page title, referrer, screen size, language and hostname, and works out the device type, browser, operating system, country, region and city. Before anything is sent, the page address and the referrer are cleaned. The query keeps only the five campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term), and only values that do not look like an email address or an id. Every other parameter, access tokens included, and the part after # are dropped. In a quote page address everything after /q/ becomes redacted, and so does any part of an address that looks like a random id (UUID). Your IP address and browser user agent are used to build a session id and are not stored. No cookies are set. The data is pseudonymous, not anonymous. Basis: our legitimate interest in knowing which pages and links work, so we can improve OfferLink (Art. 6(1)(f)). You can object at any time (see “Your rights”); a browser Do-Not-Track signal counts as an objection and stops it.
Extended analytics (only with your consent) - only after you click Accept in the cookie bar, or turn on extended analytics in Privacy settings: (1) session recordings and click and scroll heatmaps, on our marketing site and public hosted request forms only. Never on quote pages, galleries, sign-in, onboarding, the operator app, operator previews or any URL with a token; moving from a hosted form to one of those pages stops the recording and reloads the page without it. A recording holds the page layout, mouse movement, clicks and scrolling. Everything typed into form fields is masked; contact fields, request descriptions, photo previews and the request confirmation are left out entirely. Other visible text and the cleaned page address can appear. (2) Page performance reports (how fast pages load). (3) In the signed-in operator app, linking your visits and events to your account as offerlink:u: plus your Clerk account id, across devices and sessions. Basis: consent (Art. 6(1)(a)). Withdraw at any time under “Privacy settings” in the footer of any page: it stops at once and from then on, but does not erase data already collected. To ask for erasure, email us.
Consent records - when you choose in the cookie bar, our self-hosted consent service (Utati) keeps a record: the site, a random browser key id, the policy version you saw, the purposes you chose, the kind of decision and the time. No IP address or user agent. We keep it 5 years to prove consent. Basis: our legal obligation to show consent (Art. 6(1)(c) with Art. 7(1)). To record a choice at all, each browser that sees the bar gets a random key; the server keeps only a hash of its secret, the site address and an expiry. Without a choice it is deleted after 30 days (basis: legitimate interest, Art. 6(1)(f)); after a choice it is kept with the consent record (Art. 6(1)(c) with Art. 7(1)).
End-customer request data (as processor) - name, email, optional phone, description, selected services, quote acceptance or decline decisions, and photos submitted through a business’s form. We process this only to provide the service to that business, on its instructions. A business can select photos and captions from a request and publish them on its public OfferLink gallery. The business must confirm that it has the right to publish them. Note: original uploaded photos are stored as provided, and the metadata inside them (which can include location) is not removed. Public gallery copies are processed to remove embedded metadata before publication.

We only share data with the providers needed to run OfferLink:

Clerk - sign-in and account identity (United States)
Resend - sending service and quote emails (United States)
Hetzner - our database, backups, and photo storage (Germany, EU)
Umami and Utati - analytics and the cookie bar with its consent records, self-hosted by us at analytics.niuluc.me on Hetzner in Germany (EU). Nothing goes to a third party for its own use. The tracker honours Do-Not-Track.

Our primary data (database, backups, photos) stays in the EU (Germany). Two providers are in the United States - Clerk and Resend; transfers to them are covered by their certification under the EU-US Data Privacy Framework, backed by the EU Standard Contractual Clauses. We do not sell your data or use it for advertising profiles.

How long we keep it

Operator accounts: for the life of the account, then deleted within about 90 days
Security/session data: 30–90 days · activity log: 12 months
Basic statistics, extended analytics and session recordings (saved recordings included): 25 months
Consent records: 5 years · unused consent browser keys: 30 days
Your cookie bar choice: 365 days, then the bar asks again (also when the options change)
End-customer request data (as processor): 2 years from last activity, or until the business deletes it
Invoices/accounting records: about 5 years, where Polish tax law requires it

Cookies and browser storage

Sign-in cookies (Clerk) - strictly necessary to keep operators signed in.
Language - a small cookie/setting that remembers your language.
utati.consent.v1.eb2d57e0-c283-48b2-bec2-c91e40beee1c (localStorage and sessionStorage) - remembers your cookie bar choice and holds the browser key, so the bar does not ask again. Strictly necessary; kept until you clear site data.
Umami - basic statistics set no cookies; the tracker only reads the umami.disabled key if you set it to opt out. The recording script loads only after your consent and stores nothing on your device.

Because extended analytics needs your consent, the site and the app show a cookie bar at the bottom of the page until you choose. Accept and Reject sit side by side, and nothing optional is pre-selected. Change or withdraw your choice at any time under “Privacy settings” in the footer. We load no marketing tools, so the marketing option has no effect.

Your rights

You can ask us to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy to reuse elsewhere. Email hello@offerlink.me - we respond within one month.

You can object to basic statistics at any time: email us, or turn on Do-Not-Track in your browser, which stops the tracker.

You can withdraw consent to extended analytics at any time under “Privacy settings” in the footer of any page, including inside the operator app. It takes effect at once and does not affect processing before the withdrawal.

You can also complain to the Polish supervisory authority: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa - uodo.gov.pl, or to the authority in your own EU country.

Children

OfferLink is a business tool and is not directed at children.

Changes

If we make important changes, we will update the date above and let operators know.

Questions? hello@offerlink.me