Last updated 9 November 2026
Privacy
What Linkivo stores, where it goes, who can see it, how long it stays and how you take it back. Written from how the app actually works.
Who runs Linkivo
Linkivo is made and run by Muhtasim Rahman (Turzo), a student developer in Bangladesh. It is a free project; there is no company behind it and nothing is sold.
For any privacy question or request, write to linkivo.web@gmail.com.
Guest and account: two ways to use Linkivo
A guest can sign in later and move everything into the account; the guest copy on the device is then removed.
| Guest | Account | |
|---|---|---|
| Where your library lives | Only in this browser, on this device (IndexedDB and local storage). | In your account in Google Firebase (Realtime Database), with a copy cached on each device you use. |
| Sign-in | None. No email, no name. | Google sign-in or email and password, handled by Firebase Authentication. |
| If the browser data is cleared | Everything is gone and nobody can bring it back. Make a backup now and then. | Your library is still in your account and comes back when you sign in. |
| Other devices | Not possible, until you sign in and move the guest data into an account. | Every device shows the same library. |
What Linkivo stores
This is the complete list of what exists, by the part of the app that creates it.
| What | Details | Where |
|---|---|---|
| Sign-in details | Email address, display name, sign-in method, account ID and the picture address from Google when you use Google sign-in. | Firebase Authentication (accounts only). |
| Folders and links | Folder names, colours and icons; each link's address, title, tags, favourite, read-later and block flags, points and dates. | Your account (and cached on your devices). Guests: this device only. |
| Page details | The description, the address of the thumbnail picture, of a screenshot and of a video that were found for a link, and which service found them. Only addresses are kept, never the pictures or videos themselves. | Your account (a copy is cached on the device). |
| Settings | Your choices such as theme, accent colour, search and history options. | This device; for an account also in your account so every device follows. |
| Profile | Name, headline, bio, country, city, birthday, languages, interests, website, pronouns and the colours you picked, only the fields you fill in. A profile photo, if you upload one. | Your account. The photo is stored by imgbb (see the services list). |
| History | Links you opened (address, title, site, folder, how you opened it, time). You choose how long it is kept (off, 1 hour, 1, 3, 7, 14 or 30 days) and whether it stays on this device (the default) or in your account. | This device or your account, as you choose. |
| Activity log | A short record of notable actions such as imports, exports and deletes, and of security events such as a PIN change. | On this device; security events are also kept in your account. |
| Recent imports | A small record per finished import, restore or title fetch (type, counts, time). | Your account (up to the newest 50), and this device. |
| Signed-in devices | For each device: its name, browser, operating system, kind, first and last time seen, and the approximate place (city, region, country) and network address (IP) that the server saw. | Your account. Only you can see this list. |
| Lock information | Whether the app lock and the locked folders are switched on, the chosen code symbol, and the auto-lock time. Never the PIN or the code. | Your account; a copy on the device. |
| Background jobs | Jobs that continue on the server when the app is closed (for example fetching titles): the list of link IDs, progress, status and time. | Your account; finished jobs are removed automatically two days later. |
| Deleted-account record | If you delete your account: your account ID and email address, the deletion time, the day it will be removed for good, and a small summary of what the account held (shown to you before you confirm). | Firebase, until the account is purged. |
PIN, locked folders and what protects your data
- Your data is protected by the database rules on the server, not only by the screen. A request that does not belong to your account is refused.
- The app PIN and the locked-folder code are sent over HTTPS to a Cloudflare Worker that Linkivo runs. They are checked there and kept only as a hash made with a secret value (a pepper) that is not in the app or in this repository. Linkivo cannot read them back.
- Wrong guesses are counted on the server, and the wait between tries grows. This stops guessing even if someone has your device.
- With the app lock on, the database only opens for your account after the PIN was verified (a short server session). While the app is locked, the library is removed from the screen and from memory.
- The library copy that is kept on a device is encrypted with a key made from your PIN while the app lock is on. A short PIN (4 digits) is weaker against someone who copies the stored data and guesses offline; six or more digits are much better. For extra safety, also use your device's own app lock.
- By default a reload does not ask for the PIN again while the Auto lock time has not passed. To allow that, the key of the stored copy is kept on this device in a form that can be used but never read out, together with the time you last used the app; it is deleted when the app locks, when the PIN or the lock changes, and when you log out. Turn on "Ask for the PIN on every reload" in Settings > Security > App lock to keep the key in memory only.
- So that the PIN also works without internet, a signed-in device keeps a check value derived from your PIN (not the PIN). It lets someone who copies the stored data test PIN guesses offline, which the encrypted copy already allows. Without internet only the data on this device opens; locked folders do not. When the internet is back, the PIN is asked once more to open the server session.
- Locked folders live under their own path in the database that needs a separate server session. They lock again when the app locks; where the app lock is off on a device they lock on a reload and after 15 minutes without use. While they are locked they are not in memory, in the stored copy on the device, in search, in exports or in the history list. Opening a link from a locked folder is listed in History only while the folders stay unlocked, in memory, and is gone when they lock again.
- A guest's PIN is checked on the device only, so a guest who forgets it has to erase the device data.
- Honest limit: Linkivo protects you against other people and other apps, not against the person who operates the database. The project owner has technical access to the project in the Firebase console, as any project owner has. Linkivo has no screen where one person can read another person's links.
Other services Linkivo talks to
Because these services are free and can change, the list is kept up to date with each release. Pictures and videos are never copied into Linkivo; only their addresses are kept.
| Service | Used for | What it receives |
|---|---|---|
| Google Firebase (Authentication and Realtime Database), Google Hosting | Sign-in, storing an account's data, serving the app. | Everything in the "account" column above that is stored in your account. |
| Cloudflare Workers (the Linkivo Worker) | Fetching page details, checking links, PIN and locked-folder sessions, account deletion, background jobs, profile photo upload. | The link address you ask about, your PIN or code when you enter it, and your sign-in token. Cloudflare also sees the request as any host does. |
| The pages you save (the sites themselves) | The Worker opens a link's page to read its title, description and pictures; the dead-link check does the same. | A normal page request from the Worker, not from your device. |
| Jina Reader, Dub, JSONLink, Microlink, AllOrigins, the Internet Archive (Wayback Machine) | Fallbacks when a page cannot be read directly. Microlink can also be asked by the app itself for a preview. | The address of the link. Nothing else about you. |
| oEmbed providers such as YouTube, Vimeo, Spotify, SoundCloud, TikTok, Reddit and X | Titles and thumbnails of videos, music and posts. | The address of the link, through the Worker. |
| WordPress mShots and thum.io | Screenshots of a page shown as a picture in lists and in the preview. | The address of the page, requested from your browser, so they see your network address. You can switch pictures off in Settings. |
| Google favicon service | The small site icon next to a link. | The site's domain name, from your browser. |
| imgbb | Hosting the profile photo that you choose to upload. | The photo, sent through the Worker. Uploading is optional. |
| Google Fonts and flagcdn.com | Fonts and small country flags. | A normal file request from your browser. |
| YouTube (privacy-enhanced mode) | The introduction video, only after you press play, and videos inside a preview. | Loaded only when you press play. YouTube then handles that request under its own policy. |
Cookies and storage on your device
- Linkivo does not set advertising or tracking cookies and has no analytics.
- It uses your browser's storage to work: local storage for settings, IndexedDB for the cached library and unfinished jobs, and the service worker's cache for the app files, so the app opens quickly and can open offline.
- Firebase Authentication keeps your sign-in in the browser's storage so you stay signed in.
- Clearing your browser data removes all of this. For a guest that also removes the library.
Your browser's own history
Linkivo can only clear what Linkivo recorded: the History list in the app, which holds the links you opened in the preview, from Random or by a click, and the things you delete or export. When you open a link in the browser or in a new tab, the browser itself remembers that page. Linkivo cannot see or clear it. To remove it, clear it in your browser (and in your Google account, if that is switched on).
The menu names below are the usual ones and can differ a little between versions.
| Browser | How to remove the history of pages you visited |
|---|---|
| Chrome (computer) | Press Ctrl+H (Cmd+Y on a Mac), tick the pages and press Delete. Or press Ctrl+Shift+Delete (Cmd+Shift+Delete), choose a time range, tick Browsing history and press Delete data. |
| Chrome (Android, iPhone) | Menu (three dots) > History > Delete browsing data (or select single pages). Choose the time range and Browsing history. |
| Edge | Press Ctrl+H, or Ctrl+Shift+Delete, choose the time range, tick Browsing history and press Clear now. |
| Firefox | Press Ctrl+Shift+Delete (Cmd+Shift+Delete), choose the time range, tick Browsing & Download History and press OK. On a phone: Menu > History > Clear history. |
| Safari (iPhone and iPad) | Settings > Apps > Safari (older versions: Settings > Safari) > Clear History and Website Data. To remove single pages open the Bookmarks / History view in Safari and swipe a page left. |
| Safari (Mac) | Menu bar: History > Clear History, then choose the time range. |
| Samsung Internet | Menu > History > Delete (all, or select single pages). |
| Private or incognito windows | Do not keep a history in the browser. Linkivo's own History still records a link opened from Linkivo; clear it in the app. |
Google account activity and syncing
- Google account: if you are signed in to Chrome or Google and Web & App Activity is on, pages may also be saved at myactivity.google.com. Open that page, pick the entries or choose Delete activity, and choose the time range. Turning the setting off there stops it from saving more.
- If you use Chrome sync, clearing the history on one device clears it on the others; a device that is offline updates when it is online again.
- Deleting your Linkivo account removes your Linkivo data. It does not remove anything from your browser or your Google account.
How long things are kept
| Thing | How long |
|---|---|
| Deleted folders and links | In the Recycle Bin for 15 days, then removed for good. You can restore or empty it earlier. |
| A deleted account | Marked as deleted and kept for 15 days so you can reactivate it. After that the sign-in and all of its data are removed for good. |
| History | For the time you chose (off to 30 days). Older entries are removed when the app starts and when you open History. |
| Finished background jobs | Removed on the server two days after they finish; the list in the app hides them after 24 hours. |
| Signed-in devices | Until you remove them from the list or delete the account. |
| A guest's library | Until the browser data is cleared or the guest data is moved into an account. |
Your choices and your control
- Export: every folder and link, in the Linkivo backup format (which can be protected with a passphrase) or in PDF, Excel, CSV, JSON, text, Markdown, bookmarks HTML, printable HTML and OPML. Locked folders are never written into an export.
- Delete: single links and folders, the Recycle Bin, the history, and the device list entries.
- Delete the whole account: Settings > Account. You get a summary first, and 15 days to change your mind.
- Keep it local: leave History on this device, switch pictures and screenshots off, switch off remembered searches.
- Anything else, such as a copy of your data or a deletion you cannot do yourself: write to linkivo.web@gmail.com.
Younger users
Linkivo is a general tool and does not ask for a date of birth to sign in. If you are young, ask a parent or guardian before you create an account. The profile birthday is optional and only shown on your own profile.
Changes to this page
This page describes the app as of 9 November 2026. When Linkivo changes in a way that affects your data, this page is changed in the same release and the date above is updated.
Questions? linkivo.web@gmail.com. See also Terms of use.