Privacy Policy
TODO before launch: confirm the privacy inbox [email protected] is live. This is boilerplate, not legal advice.
Who we are
LinkMarshal is a trade name of Cranor Ventures LLC, a Utah limited liability company. In this policy, “LinkMarshal,” “we,” and “us” refer to Cranor Ventures LLC doing business as LinkMarshal. Contact: [email protected] or [email protected].
US-only service. LinkMarshal is offered only to US residents and US organizations. It is not available in the EEA, UK, or any other non-US region, and we block sign-up and use from outside the United States. See also our Terms of Service.
Summary
LinkMarshal builds tracked (UTM) campaign links. We store the links and campaign names you create so you and your team can reuse them. We do not sell your personal data. We do not show third-party ads in the product.
What the Chrome extension collects
- Google account email / ID (or email if email sign-in is enabled) when you sign in — to create your account and membership.
- Session tokens — stored in extension local storage to keep you signed in; sent to our backend to authenticate requests.
- Links you build — destination URL, UTM values, optional team member number, platform ad parameters, and when the link was created — for your library and naming-rule checks.
- Campaigns, channels, naming rules, members, invites — team configuration.
- AI agents and API keys — names your admins give agents, hashed keys, and when a key was last used, so links made by an agent are labeled as such.
- Current tab URL — only when you open the popup (
activeTab); used to suggest a channel or prefill the destination. Not sent unless you save/copy a link that uses it. - Region check — when you sign in, our edge network checks that your connection is in the United States; we store only the result (“US”) and when it was checked, not your IP address.
- Trial record — a one-way hash of your normalized email address (and of your company email domain, if it is not a public email provider) so each person or company gets one free trial. The hash is kept after a workspace is closed so a trial can't be restarted.
LinkMarshal builds plain UTM links. It does not create short links or redirect links, so it does not record who clicks your links. QR codes encode your full link and are generated on your device.
The extension does not load remote code, does not use analytics or tracking scripts, does not sell data, and does not track your browsing in the background.
Marketing site, waitlist, and analytics
Waitlist. If you join the early-access list we store your email and optional company, role, and plan interest, plus attribution from your visit (UTM parameters and ad click IDs such as gclid, fbclid, li_fat_id, msclkid, ttclid) so we can see which campaigns convert. Attribution is kept in your browser's session storage until you submit the form or close the tab.
Google Analytics 4. The marketing site (linkmarshal.com, including the pricing and legal pages) uses Google Analytics 4 when it is configured, and only for visitors we detect as being in the United States. GA4 sets first-party cookies (such as _ga and _ga_*) to tell visits apart. It collects page views, including the page address and any UTM or ad click ID parameters in it, the referring page, basic device and browser information, and a generate_lead event (with the form variant and selected plan) when you join the waitlist. IP anonymization is requested, and Google signals and ad personalization are turned off. Google processes this data under its own privacy policy; you can block it with your browser's cookie settings or the Google Analytics opt-out add-on.
No analytics in the product. The Chrome extension and the admin portal do not use Google Analytics or any other analytics or tracking script. They only talk to our own backend (Supabase).
Plans and trials
New workspaces can get a 14-day Team trial with no card required, including up to 2 AI agents. We record when the trial started and ended so each customer gets one trial. When it ends, the workspace moves to the Free plan; nothing is deleted.
Service providers (processors)
- Supabase — database, authentication, Edge Functions (backend).
- Cloudflare — hosts the marketing site and admin (Pages); may process request metadata including approximate country for our US-only gate.
- Google — Sign in with Google (if used) and Google Analytics 4 on the marketing site only (US visitors).
- Slack — if your team connects Slack, command text is processed to build links.
- Stripe — once billing is enabled, processes payments and stores billing details (name, email, card, and address). We do not store card numbers.
Children
LinkMarshal is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children under 13.
Your choices (CCPA-style basics)
If you are a California resident you may request access to or deletion of personal information we hold about you, and you may ask us not to “sell” or “share” personal information. We do not sell personal information and do not share it for cross-context behavioral advertising. To exercise rights, email [email protected]. We will not discriminate against you for exercising these rights.
Data retention and deletion
While your workspace is active, account data is kept until you or an admin change or remove it.
Changing plans does not delete anything. If you cancel a paid plan, or a free trial ends, your workspace moves to the Free plan and your data stays. Deletion only starts when an owner closes the workspace or you ask us to delete it.
When you close your workspace, we keep it for 30 days in case you come back (an owner can restore it during that window). After 30 days we permanently delete the personal information of the people on your team: names, emails, invites, API keys, Slack user mappings, AI agent names, override notes, error-report details, waitlist entries that use a team member’s email, and sign-in accounts for users who do not belong to another workspace. We keep the account, billing and accounting records (including Stripe customer and subscription records needed for tax and bookkeeping), and de-identified usage such as links and rule outcomes with people replaced by labels like “Former member #3,” which cannot be tied back to those individuals. We use that de-identified usage to understand churn and improve the product, and to recognize a returning customer (for example by billing email or company domain) so we can link the new workspace to the old one.
Export before you leave. From the admin you can download your Library (CSV) and Rules (portable JSON plus a readable CSV) at any time, including during the 30-day grace period. After that window we cannot recover member-level personal data.
You can also request deletion by emailing [email protected]. We aim to start the same 30-day process on request. Some billing records are retained as required for tax and accounting.
Security
Data in transit uses HTTPS. Access is limited by authentication and row-level security in our database. API keys are stored hashed.
Governing law
This policy is governed by the laws of the State of Utah, USA, without regard to conflict-of-law rules.
Chrome Web Store Limited Use
LinkMarshal’s use of information received from Google APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
Changes
We will post updates on this page and revise the “Last updated” date. Material changes may also be noted in the product or by email.