Privacy Policy

Portal (“Portal”, “we”) provides link-in-bio pages at prt.al/<handle> and the dashboard at app.prt.al where page owners edit them. This policy covers both: people who have a Portal account (“owners”) and people who visit a Portal page (“visitors”).

• Account details — your email address and sign-in credentials. Passwords are stored hashed by our authentication provider; we never see them in plain text.
• Page content — your handle, display name, bio, links, and any photos, video or audio you upload. This is published on your page by design.
• Invite requests — if you ask for an invite, the email address, handle and social link you give us.

Owners can link accounts on other services (currently Last.fm, Steam and Twitch) by giving us a username or profile ID. We store that identifier and your visibility settings for it.

When someone opens your page, our servers ask that service for the account's public activity (for example the track you're playing, the game you're in, or whether you're live) and keep the answer in a short-lived cache, typically a minute or two, so busy pages don't ask again on every view. We don't store that activity beyond the cache or build a history of it. Turning a connection off, or removing it, stops it showing immediately.

The request comes from our servers, not the visitor's browser, and we don't send those services anything about your visitors. Each service's own privacy policy covers what it does with your account.

When someone views a page or taps a link on it, we record a count against that page and link, with the date, the approximate country the request came from (as reported by our network provider), and the source tag on the link they arrived through (for example ?ref=tiktok or a utm_source). The browser's user-agent may be used to filter out automated traffic.

We do not store visitors' IP addresses in our analytics, build profiles of individual visitors, or try to identify them. Owners see totals — views, clicks, sources and countries — never individual people.

Some pages can show a visitor their own approximate city. That is looked up when the page loads, shown only to that visitor, and not recorded.

Portal pages load no advertising or third-party analytics tools — no ad pixels, no tag managers. When a visitor follows a link, any source tag is passed along to the destination so the owner's own site can attribute the visit; what that site does is governed by its own policy.

Pages set no cookies for visitors. A page may use the visitor's browser storage to remember small choices, such as dismissing a prompt or confirming an age notice; that stays on the device. The owner dashboard at app.prt.al uses cookies that are strictly necessary to keep you signed in.

To run the service: publish pages, show owners their statistics, sign owners in, send service emails (such as invites and security notices), and detect and act on abuse. We do not sell personal information and do not use it for advertising.

We use a small number of infrastructure providers, each only for the part of the service they run:

• Cloudflare — serves pages, stores page content, media and statistics, and fetches connected-account activity.
• Supabase — owner accounts, sign-in and invite requests.
• Vercel — hosts this website and the owner dashboard.

Data may be processed in countries other than your own, under those providers' safeguards.

Account details and page content are kept while your account exists and deleted when you delete it. Daily statistics are kept for the life of the page. Detailed event data used to compute them is kept for a limited period (up to about three months). Abuse reports are kept as long as needed to handle them and prevent repeat abuse.

Owners can edit or delete their page and account at any time. Anyone can ask us for a copy of the personal information we hold about them, or ask us to correct or delete it, by emailing [email protected]. Depending on where you live you may also have the right to complain to a data protection authority.

Portal accounts are for people who are at least 18, or the age of majority where they live. We don't knowingly collect information from children.

If we change this policy we'll update the date at the top, and tell owners by email about material changes. Questions: [email protected]. See also our Terms.