Skip to content
Collr
LEGAL

Privacy Policy

LAST UPDATED 16 AUG 2026

01

What we collect

When you create a Collr account we collect your email address, the display name and handle you choose, and any profile content you add yourself — bio, avatar, cover image, theme choice, and the links you publish. We also record basic technical data needed to operate the service: sign-in timestamps, and aggregate page-view and link-click counts for your own profile’s analytics.

02

How we use it

Account data is used to authenticate you, render your public profile, and show you analytics for your own links. We use your email address to send account-related mail — verification, password resets, and, if you contact us, replies to your message. We do not sell your data to third parties.

03

What's public

Your profile page (name, handle, bio, avatar, and any links you add) is public to anyone with the URL once you publish it. Whether you appear in the community directory is a separate, opt-in setting you control from your dashboard. Your email address and sign-in activity are never shown publicly.

04

Where your data is stored

Your data is processed and stored on servers located in the European Union. This applies to all users regardless of where you are located. Your profile data, links, analytics, and account information never leave EU-based infrastructure.

Some third-party services we use (listed below) may process data outside the EU — for example, Stripe processes payment data in the US under the EU–US Data Privacy Framework. We only use services that provide appropriate safeguards for international data transfers.

05

Cookies

We use a session cookie to keep you signed in and a CSRF token to protect form submissions. We don’t use third-party advertising or tracking cookies.

06

Data retention and deletion

We keep your account data for as long as your account is active. If you’d like your account and associated data deleted, contact us and we’ll process the request.

07

Third-party services

We use a small number of third-party services to operate Collr. Each processes only the data necessary to provide its function.

Stripe · Payment processing

Stripe, Inc. (US) processes your name, email address, and payment information when you subscribe to a premium plan. Stripe is certified under the EU–US Data Privacy Framework and their Data Processing Agreement includes Standard Contractual Clauses. Stripe does not use your data for marketing. See Stripe’s Privacy Policy.

Sentry · Error tracking

Functional Software, Inc. (Sentry) receives anonymised error reports and stack traces when something goes wrong. Sentry is configured with EU data residency — your data does not leave the European Union. We minimise the information sent to Sentry and do not transmit passwords or payment details.

Cloudflare Turnstile · Bot protection

Cloudflare, Inc. provides Turnstile, a CAPTCHA alternative used on our registration, login, and contact forms to prevent automated abuse. Turnstile may process your IP address and browser fingerprint for bot detection. See Cloudflare’s Privacy Policy.

MailTrap · Transactional email

MailTrap (Botgirl Labs, US) sends transactional emails on our behalf — account verification, password resets, and replies to support messages. Your email address and the content of these messages are processed by MailTrap. We do not use MailTrap for marketing.

MinIO · File storage

We self-host MinIO on our own EU-based servers to store your profile images (avatars, cover photos). No data is transferred outside the European Union.

08

Telegram support bot

Messages you send to our Telegram support bot are relayed live to the Collr team’s Telegram account so we can reply. We don’t store the message text itself in our database — only your Telegram chat ID, and, if you opened the bot from a link in your Collr account, which account it’s linked to, so replies reach the right chat. This data is used only to operate support, and kept only as long as needed to do so.

Your support messages pass through Telegram Messenger Inc.’s infrastructure (US/EU/Netherlands). Telegram does not offer Data Processing Agreements to bot developers. We minimise the data sent — only your chat ID and the support message text. No sensitive personal data should be sent via Telegram support.

09

Telegram priority support bot

This is the dedicated support line for Premium and Premium+ members and handles data the same way as the regular support bot above: message text is never stored in our database, only your Telegram chat ID and, if linked, the Collr account it belongs to — used to route replies and confirm your membership, and kept only as long as needed to provide support.

10

Contact

Questions about this policy or your data can be sent through our contact page.