Legal
Privacy Policy
Last updated 17 September 2026
What personal data Limen uses, why, and what you can do about it.
Before launch: add LEGAL_NAME, LEGAL_ADDRESS and KVK_NUMBER (and VAT_NUMBER once you have one) to the environment so they appear on this page.
01Who is responsible
The business below is the controller of your personal data under the GDPR. For any privacy question or request, email support@limen.ad.
- Operated by
- Limen
- support@limen.ad
02What we collect and why
| Who | What | Why | Legal basis |
|---|---|---|---|
| Everyone with an account | Email address, password (stored only as a secure hash), public name if you set one, login sessions | To run your account and keep it secure | Contract |
| Premium members | Subscription status, payment history, country, and a Stripe customer ID. Your card details go to Stripe, never to us. | To provide Premium, bill you and keep accounting records | Contract, legal obligation |
| Creators | Your links, their statistics, earnings, cashouts, and payout details (PayPal email, or account holder name and IBAN, which we store encrypted) | To run your links and pay you | Contract, legal obligation |
| Visitors opening a link | A scrambled (salted hash) version of your IP address, your progress through the steps, the website you came from, device type, browser and country | To stop bots and abuse, count visits, and show creators anonymous statistics | Legitimate interest |
| People sending a report | Your report, a scrambled IP address, and your email if you give it | To review the report and reply to you | Legitimate interest |
05Data outside the EU
Some of these companies are based in the United States or process data there. We only use companies that protect it with the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
06How long we keep it
- Account data: as long as your account exists. When you ask us to delete it, we do so within 30 days.
- Unlock progress: deleted after 30 days, or 180 days for completed offers, because networks can still reverse those. Visit statistics: deleted after 24 months.
- Expired login sessions and email links: deleted automatically.
- Closed reports: deleted after 12 months.
- Payments, payouts and invoices: 7 years, because Dutch tax law requires it, even if you delete your account.
07Your rights
You can ask us to see, correct, delete or export your data, to limit how we use it, or object to how we use it. Email support@limen.ad from the address on your account, and we reply within one month.
If you're not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.
08Security
All traffic is encrypted (HTTPS). Passwords are stored as secure hashes, bank details are encrypted, and IP addresses are scrambled before we store them. Only the people who run Limen can see creator payout details.
09Children
Limen accounts are not for children under 16. If you think a child gave us their data, email support@limen.ad.
10Changes
If we change this policy in a way that matters, we tell you by email or on the site before it applies. The date at the top shows the latest version.