Privacy policy

The short version

• Public bio pages are cookieless. Visitors are never tracked with cookies, fingerprinting or third-party ad tech.
• Analytics are aggregate, first-party and privacy-friendly: page views and link clicks by day, referrer, country and device class. No visitor profiles, no cross-site tracking, nothing sold or shared.
• You can export everything we hold about your account as JSON, and delete your account — both self-serve from the editor, no email required.

Who we are

edit.bio is operated by S5 Ltd, a company registered in England and Wales (company no. 16842049), 20 Wenlock Road, London, N1 7GU, United Kingdom. S5 Ltd is the data controller for account data. For anything privacy-related, emailprivacy@edit.bio.

What we collect, and why

• Account data — your email address and sign-in sessions. Legal basis: contract (we can't run your account without it).
• Your page content — the blocks, links, images and settings you publish. You control this entirely; it's public by design when you publish it.
• Form submissions — when a visitor fills in a form on your page, we store the submission and email it to you. Here you are the controller for that data and we process it on your behalf; it appears in your inbox and export, and is deleted with your account.
• Aggregate analytics — cookieless view/click counts for your pages, rolled up daily. Raw events are not tied to any visitor identity.
• Billing data — handled by Stripe (see processors). We store your plan, subscription status and Stripe customer reference; card details never touch our servers.

Cookies

Public bio pages set no cookies at all. The editor at edit.bio/admin uses one strictly-necessary session cookie to keep you signed in — nothing else, so there is no cookie banner because there is nothing to consent to.

Processors we rely on

• Cloudflare — hosting, DNS and content delivery (including custom-domain SSL).
• Stripe — payments and subscription billing.
• Self-hosted infrastructure — our database and transactional email run on servers we operate in the EU/UK; your data is not handed to third-party analytics or marketing tools.

Your rights

Under UK and EU GDPR you can access, correct, export, restrict or delete your personal data. The fastest routes: export your data as JSON from the editor (Plan & billing → Your data), or delete your account from the same place — deletion removes your pages, domains, form submissions and analytics immediately and cancels any subscription. You can also complain to the ICO (UK) or your local supervisory authority, but we'd appreciate the chance to fix things first.

Retention

Account data lives for as long as your account does. Free-tier analytics are retained for 30 days, paid tiers for up to 12 months. Deleted accounts are removed from the live database immediately; encrypted backups age out within 30 days.

Changes

If this policy changes materially we'll email account holders before the change takes effect. The latest version always lives at edit.bio/privacy.