Privacy & cookie policy
This policy explains what we collect when you visit linkaza.com or use your account, the dashboard and the free tools, why we collect it, who we share it with and how you control it. It applies to buyers, publishers and visitors.
Contact us about privacy1. Who we are
Linkaza is a marketplace where buyers order backlinks and guest posts from publisher websites, and publishers manage their sites, orders and earnings. This policy covers the website, the dashboard, the free tools and the emails we send. Privacy contact: [email protected].
2. Information we collect
Account: name, email, password (stored only as a one-way hash), interface language and whether you buy, sell or both. Orders and websites: the websites you add or ask us to analyse, prices, target pages, anchor texts and content, and messages with publishers and our team. Balance and payouts: top-up and order amounts, the transaction history and the transfer receipts you attach; for publishers, the payout method and the details you enter (such as a PayPal email or bank details). We don't store card numbers. Invites: if you sign up through another member's invite link, we record who invited you and whether you have confirmed your email and verified a website. Free checklists (the SEO checklist and the backlink list): the websites you add to follow, and what you mark for each as done, in progress or not applicable. If you use them without an account, we record that you used them and the website you typed into the “Your website” field, if you did. Google data if you connect Search Console (section 3). Technical: IP address, browser and device details and server logs, for security, rate limits and fixing errors. Free tools (with or without an account): each time one is used we record the tool, the address you entered to check, the time, the interface language, the country when known, whether the check worked, and your account if you are signed in. We don't keep the IP address in this record, only a one-way fingerprint derived from it that tells one visitor from another. In the local search tool your keyword never reaches us; we only record that the tool was used.
3. Google user data (Search Console)
Publishers can connect a Google account to prove they own a website and show its real traffic. With your permission we request your Google account email (openid, email) and read-only access to Search Console (webmasters.readonly); we can't change anything in your account. What we read: the list of your Search Console properties and your permission level on each, to confirm you own the website you listed; then, for verified websites only, search performance for the last 28 days (clicks, impressions, click-through rate, average position, top countries, top search queries and top pages), refreshed daily. How we use it: to verify ownership, and to show the website's performance on its marketplace listing — signed-in buyers with a confirmed email see the full figures including queries and pages, while visitors see rounded totals, countries and the daily trend only — and to show it to you in your dashboard. What we don't do: we don't sell Google user data or use it for advertising, we don't send it to AI providers or use it to train AI or machine-learning models, and no one reads it except with your consent or as needed for support, security or the law. Storage and removal: the access token is encrypted (AES-256). You can disconnect at any time in Settings → Security; we then revoke our access at Google, delete the data imported through that account and remove the “Verified by Google” badge. You can also revoke access at myaccount.google.com/permissions. Linkaza's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use information
To create and secure your account (including email verification codes), carry out orders, top-ups and payouts, show websites and their statistics in the marketplace, send service emails (codes, order and payout updates, and new matches if you turn them on), provide support, prevent fraud and abuse (including checking you're not a robot before the free tools run), and improve features. We use the record of the free tools and checklists to see who benefits from them and to contact the owners of those websites about our services; you can object to that as described in section 10. We don't sell your data or use it to show third-party advertising.
5. AI features
Some features use an AI provider (Google Gemini, OpenAI or Anthropic, whichever we have enabled): analysing a website you add, marketplace search by description, recommendations, site summaries, anchor suggestions and article drafts. We send only what the feature needs: the public text of the website being analysed, your request, and the order details a draft needs. We never send Search Console data, passwords or payment details. The provider processes this data under its own terms, and some plans allow a provider to retain or review requests, so don't put confidential information in AI requests. Every feature also works without AI, using simpler rules.
6. Who we share information with
The other side of an order, as far as needed: publishers see the target page, anchor text and content; buyers see the listed website's details. The member who invited you, if you signed up through their invite link: they see your first name, a masked version of your email and the steps you have completed. Service providers working for us: hosting and network providers, Resend for email, Google (the Search Console API, and PageSpeed Insights for the speed test), Cloudflare when we turn on its Turnstile service to check for robots in the free tools, the AI provider described above, and an SEO data provider that receives only the domain name (of websites listed on the marketplace, and of the website you add to your account or check with our tools) so we can read its public figures: its strength, its links and its search traffic. And when a binding legal request requires it. We don't sell, rent or trade personal information.
7. Cookies and local storage
We use cookies the service needs to work: lz_token keeps you signed in (up to 30 days), lz_admin holds an admin-console session (12 hours), NEXT_LOCALE remembers your language (1 year) and lz_sidebar remembers the width of the dashboard menu (1 year). If you open the site through a member's invite link, lz_ref keeps that invite code for 30 days so your sign-up counts for them; it is deleted when you create your account. Your browser also stores simple preferences such as buying or selling mode, the marketplace view and muted notification sounds, your ticks on the SEO checklist and the free backlink list until you sign in and add your website, when they move to your account, and the website you last chose there or typed before creating your account (lz_checklist_guest_site). When you use the free tools, your browser keeps the robot-check pass (lz_human_pass, until you close the tab) and what stops your use of the same tool being recorded more than once a day (lz_tool_used). We use no advertising cookies and no third-party analytics. If you delete them you'll need to sign in and choose your language again.
8. How long we keep data
We keep account data while the account is open. When you request deletion in Settings we delete or anonymise the account's data, except what we must keep for financial records, fraud prevention or legal obligations. Verification codes expire within minutes, and a free tool's report is kept in memory for a few minutes only; the record of tool and checklist use (the tool, the address and the time) is kept until you ask us to delete it or it is no longer needed. Search Console data is deleted as soon as you disconnect Google.
9. Security
We use HTTPS, password hashing, AES-256 encryption for Google tokens and service keys, a separate admin sign-in with an emailed code, and a log of every change our team makes. An account's email only changes after a code sent to the new address and our team's approval, and the old address is told at once. No system is perfectly secure, but we keep reviewing these measures.
10. Your rights and choices
Depending on the law that applies to you, you can access, correct, export or delete your data, and restrict or object to its processing. You can change most of it in Settings, disconnect Google at any time and request account deletion. For anything else, email [email protected].
11. Children
The service is for people aged 18 and over, and we don't knowingly collect data from anyone younger.
12. International transfers
Our providers may process data in countries other than yours. We rely on providers that apply appropriate safeguards to transferred data.
13. Changes to this policy
We may update this policy and will change the date above. If we change how we use Google user data, we'll ask for your consent first.
14. Contact
Privacy questions and data requests: [email protected]. General support: [email protected].