Privacy Policy
Last Updated: August 18, 2026 • Global Standard Compliance (GDPR, CCPA/CPRA)
Our Core Privacy Commitment: Zero Cookies & Data Minimization
Treach was architected from the ground up to respect human privacy across every global jurisdiction.
We do not create, set, read, or distribute tracking cookies, advertising cookies, or third-party behavioral pixels. Visitors to Treach link profiles will never encounter a cookie consent banner because no cookies exist.
We strictly touch and use only the data saved by the website in your browser storage (HTML5 localStorage/sessionStorage) to maintain your active creator login session and local theme preferences.
1. Strict Zero-Cookie Policy
Unlike conventional social media link aggregators that place cross-site trackers on user devices, Treach does not use cookies of any kind:
- No Tracking Cookies: We do not track users across the internet or profile user behavior across external websites.
- No Advertising Cookies: We have no relationships with advertising exchanges, ad networks, or data brokers.
- No Third-Party Analytics Beacons: No foreign tracking scripts or biometric surveillance tags are injected into your public link profiles.
2. Web Browser Storage Policy (HTML5 LocalStorage)
Because we do not use cookies, Treach utilizes client-side web browser storage (HTML5 localStorage and sessionStorage) strictly for essential app functionality:
Scope Guarantee: Treach only touches and uses data that was directly placed into storage by the Treach website itself. We cannot, do not, and will never access, inspect, or scan storage, files, or data from any other website, application, or system on your device. You can clear this storage at any time by clearing your browser cache.
3. Information We Collect & How It Is Used
We adhere strictly to the principle of data minimization. We only collect the bare minimum information needed to operate the service:
- Account Data: When registering, you provide your name, creator handle/username, and email address. Passwords are salted and securely hashed before storage.
- Profile & Link Content: You voluntarily input outbound URLs, title labels, subtitle descriptions, badge badges, custom themes, and avatar images that you wish to publicly display.
- Privacy-Preserving Aggregate Metrics: When visitors click on a creator's link, we increment an anonymous aggregate integer counter. We do not log visitor IP addresses, location coordinates, browser fingerprints, or personal visitor identities.
4. Zero Sale or Commercialization of Data
We do not sell, rent, lease, monetize, or trade your personal information, profile analytics, or visitor metrics to third parties, advertisers, data brokers, or marketing syndicates. Data submitted to Treach is utilized exclusively to provide the link-in-bio service requested by you.
5. Third-Party Outbound Links
Treach profiles function as portals to creator destinations on third-party platforms (e.g., YouTube, GitHub, Spotify, Instagram, X/Twitter). When a visitor clicks an outbound link, they leave Treach and navigate directly to that external domain.
External third-party platforms operate under their own independent privacy policies and data collection practices. We encourage visitors to review the privacy terms of any third-party service they visit.
6. Global Privacy Rights (GDPR, CCPA/CPRA, LGPD)
Regardless of where you reside, Treach guarantees comprehensive privacy rights aligned with global standards, including the European Union General Data Protection Regulation (GDPR), United Kingdom Data Protection Act, and California Consumer Privacy Act (CCPA/CPRA):
7. Data Security & Retention Safeguards
We employ modern administrative, technical, and cryptographic safeguards to protect your information:
- Transport Encryption: All data transmissions are encrypted in transit using industry-standard TLS 1.3 / HTTPS.
- Access Controls: Creator profile management requires authenticated session verification.
- Retention Period: Creator data is retained only for as long as your account remains active. Upon voluntary account deletion, your profile and outbound links are permanently removed from public routing.
8. Children's Privacy (COPPA Compliance)
Treach is intended for general audiences and is not directed to children under 13 years of age. We do not knowingly solicit or collect personal information from children under 13. If we discover that an account has been created by a child under 13 without verified parental consent, we will promptly delete that account.
9. Contact Our Data Protection Team
If you have questions regarding this Privacy Policy, wish to exercise your statutory privacy rights, or need assistance managing your data, please contact our Data Protection Officer: