Limen

Legal

Privacy Policy

Last updated 17 September 2026

What personal data Limen uses, why, and what you can do about it.

Before launch: add LEGAL_NAME, LEGAL_ADDRESS and KVK_NUMBER (and VAT_NUMBER once you have one) to the environment so they appear on this page.

01Who is responsible

The business below is the controller of your personal data under the GDPR. For any privacy question or request, email support@limen.ad.

Operated by
Limen

02What we collect and why

WhoWhatWhyLegal basis
Everyone with an accountEmail address, password (stored only as a secure hash), public name if you set one, login sessionsTo run your account and keep it secureContract
Premium membersSubscription status, payment history, country, and a Stripe customer ID. Your card details go to Stripe, never to us.To provide Premium, bill you and keep accounting recordsContract, legal obligation
CreatorsYour links, their statistics, earnings, cashouts, and payout details (PayPal email, or account holder name and IBAN, which we store encrypted)To run your links and pay youContract, legal obligation
Visitors opening a linkA scrambled (salted hash) version of your IP address, your progress through the steps, the website you came from, device type, browser and countryTo stop bots and abuse, count visits, and show creators anonymous statisticsLegitimate interest
People sending a reportYour report, a scrambled IP address, and your email if you give itTo review the report and reply to youLegitimate interest

03Cookies

Limen only uses cookies that are needed for the site to work, so we don't ask for cookie consent. We don't use advertising or tracking cookies ourselves.

  • limen_session keeps you logged in (30 days).
  • limen_unlock_… remembers your progress on a link (1 hour).

Two services on our pages may also store data in your browser for security: Cloudflare Turnstile, which checks that visitors are human before an unlock starts, and Stripe, on the Premium payment form, to process payments and prevent fraud.

Sponsor and offer pages are run by other companies, which may use their own cookies. Their privacy policies apply there.

04Who we share data with

We never sell your data. We only share it with companies that help us run Limen:

  • Cloudflare: hosting, security and the bot check
  • Turso: our database
  • Stripe: payments. For some purposes, such as fraud prevention, Stripe is responsible for the data itself.
  • Resend: sending account emails, such as password resets
  • PayPal and banks: sending creator payouts
  • Ad and offer networks: when you open a sponsor or offer, you visit their site directly. For offers we only send a random reference, so they can confirm the task without learning who you are.

We may also share data when the law requires it, for example with the police or the tax authorities.

05Data outside the EU

Some of these companies are based in the United States or process data there. We only use companies that protect it with the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

06How long we keep it

  • Account data: as long as your account exists. When you ask us to delete it, we do so within 30 days.
  • Unlock progress: deleted after 30 days, or 180 days for completed offers, because networks can still reverse those. Visit statistics: deleted after 24 months.
  • Expired login sessions and email links: deleted automatically.
  • Closed reports: deleted after 12 months.
  • Payments, payouts and invoices: 7 years, because Dutch tax law requires it, even if you delete your account.

07Your rights

You can ask us to see, correct, delete or export your data, to limit how we use it, or object to how we use it. Email support@limen.ad from the address on your account, and we reply within one month.

If you're not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.

08Security

All traffic is encrypted (HTTPS). Passwords are stored as secure hashes, bank details are encrypted, and IP addresses are scrambled before we store them. Only the people who run Limen can see creator payout details.

09Children

Limen accounts are not for children under 16. If you think a child gave us their data, email support@limen.ad.

10Changes

If we change this policy in a way that matters, we tell you by email or on the site before it applies. The date at the top shows the latest version.