Link Graveyard is run by That Fellow Digital LLC. There are no accounts and no database. Scans run on our server but are not saved there. Your scan history and watchlist live in your own browser. If you buy Pro, Stripe handles the payment and keeps the purchase record.
The address you enter is sent to our server, which is hosted on Railway. Our server fetches pages from that site, checks the links it finds, and streams the results to your browser as it goes. The pages and links it fetches are used only to build your report. We don't save reports on our server.
The sites you scan see visits from our server, identified as Link Graveyard's crawler, not from your device.
Two other features also pass through our server without being saved: when you press Check All on your watchlist, the watched links are sent to our server so it can check them, and when you download a CSV, your browser sends the file's contents to our server, which sends them straight back as a download.
These are kept in your browser's local storage, on your device only:
You can delete saved scans and watchlist links in the app, or remove all of it by clearing this site's data in your browser settings.
When you buy or restore Pro, we set a signed license cookie. It is httpOnly, which means scripts on the page can't read it, and our server uses it to confirm your Pro status. It holds a reference to your Stripe purchase, not your email address. We don't use cookies for advertising or analytics.
Pro purchases are handled by Stripe. You enter your card details on Stripe's checkout page, so we never see or store your card number. Stripe gives us your email address and whether your payment went through, and keeps the record of your purchase. How Stripe handles your data is covered by Stripe's privacy policy.
When you use Restore Pro, the email address you enter is sent to our server, which looks it up in Stripe to find your Pro purchase. We use it only for that lookup. To stop repeated guessing, our server also remembers your IP address in memory for up to 10 minutes after a restore attempt.
Like most hosts, Railway keeps standard server logs. These can include your IP address and the address you requested, which for a scan includes the site you asked us to check. They are kept for a limited time and used to keep the service running and to fix problems.
The site has no analytics, advertising or tracking scripts. Fonts are served from our own server, so loading a page doesn't contact a font service. The share button only opens X (Twitter) if you click it. We don't sell or rent your data.
To ask what we hold about you, or to have it deleted, email fellowhelpdesk@gmail.com. In practice the personal data we control is the Stripe record of a Pro purchase: your email address and the payment itself. If we delete it, we can no longer restore your Pro on a new device, and we may have to keep some payment records where the law requires it. Server logs expire on their own.
If we change how Link Graveyard handles data, we will update this page and the date at the top. Questions? Email fellowhelpdesk@gmail.com.