Privacy Policy

What you publish

When you share a page, we store the HTML content, an auto-generated slug, a timestamp, and an optional title and password. If you set a password, it is stored hashed — not in plain text. If you share a page with specific people, we store the email addresses and company domains you list, and use them only to decide who can open it.

Anyone with the URL can view a public page. For password-protected pages, anyone with the URL and the password can view. For pages shared with specific people, only visitors who sign in with a Google or Microsoft account whose email address is on the list — or at a company domain on it — can view. We may access stored content to investigate abuse reports, respond to support requests, or comply with legal obligations.

How long we keep it

Pages stay live until you remove them with /unshare and your delete key. We may also remove pages that violate our terms of use.

What we collect about visitors

We count page views in aggregate to understand traffic. We do not store visitor IP addresses or browser fingerprints, set tracking cookies, or identify individual visitors to shared pages — with one exception, below.

To open a page shared with specific people, a visitor signs in with Google or Microsoft. That creates a sharable.link account holding their name, email address, and the account ID their provider gives us — the same kind of account used to publish pages. We use the email address to check it against the page's list. We don't record which pages a signed-in visitor opens, and we don't tell the person who shared a page who viewed it.

IP addresses are processed to apply rate limits and prevent abuse, and aren't stored for visitors who don't sign in. When anyone signs in — to publish, or to open a page shared with them — the session we create records the IP address and browser it was created from.

Abuse reports

When you report a page with our report form, we store the link you reported, the email address you give us, and what you tell us about the page. We use them to review the report and, if we need more detail, to contact you about it.

Cookies and analytics

Shared pages set no cookies and run no third-party trackers. Signing in to open a page shared with specific people sets a session cookie on sharable.link, so you stay signed in.

Our marketing pages (homepage, blog, install guide) use Google Analytics and Vercel Analytics for aggregate traffic statistics. These services may set cookies. If you block analytics cookies, the site still works.

Where data is stored

Page content and metadata are stored on infrastructure operated by Vercel Inc. (United States). By using sharable.link you consent to data being processed in the United States.

Sharing with third parties

We do not sell, rent, or trade your content or any data we collect. We share data only with the infrastructure providers we use to run the service (Vercel) and only when required by law.

Your rights

You can remove any page you published at any time using your delete key. Lost the key? Contact us and we'll help.

You may also have rights under your local data protection law (GDPR, CCPA, etc.) to request access, correction, or deletion of personal data. For most visitors we hold no identifiers, so these requests mostly apply to content you yourself published — which you can delete at any time without contacting us. If you signed in, your account holds your name and email address; contact us to have it deleted.

Changes to this policy

We'll update this page if our practices change. The effective date at the top will reflect the latest version.

Contact

To report a page, use our report form. Questions or requests: reach us on LinkedIn.