Privacy Policy

Submissions: the public URL you provide, its domain or profile handle, extracted title, description and image URLs, the type and amount of your bid, selected shortcut slot, review status and reasons, and relevant timestamps. For new submissions, we record the terms version accepted, the acceptance time and the privacy notice version shown. Acceptance of contractual terms is not, by itself, consent to advertising tracking.

Payments and support: Stripe supplies your checkout email, checkout and payment identifiers, amount, currency, payment status and refund information. Stripe collects card and relevant billing or tax information directly. We do not receive or store full card numbers or security codes. We also receive anything you choose to send in a support or privacy request; please do not send payment credentials.

Browser and technical information: random visitor and review identifiers, first and last seen times, approximate online status, and outbound click records. The visitor database does not store raw IP addresses. Rate limiting uses a hash derived from the request IP on our hosting platform; hosting and security services may process IP addresses and request logs. Advertising records can contain raw IP addresses as described in section 5.

Regular paid bids and custom shortcut purchases appear in public history with their URL, amount and payment date. Current shortcuts also display their domain or profile handle and slot. Trash links are public inside the bin rather than regular history. Homepage owners have public owner numbers, time held and click counts. Public material may be indexed by search engines or copied by other people.

We do not intentionally publish checkout email addresses, payment identifiers, advertising identifiers or private review-access tokens. Do not submit private URLs, access tokens or personal information you do not want visible. Removing content from our service cannot recall independent copies, search caches or records another person lawfully retains.

We use information to review and publish links, determine placement, process payments and refunds, provide private submission status, answer support requests, keep counters and security controls working, prevent abuse, measure the service and advertising, comply with legal obligations and resolve disputes.

Where data protection law requires a legal basis, processing needed to deliver a purchase relies on performance of the contract; security and operational work may rely on legitimate interests balanced against your rights; and required records rely on legal obligations. Where consent is legally required for particular processing, contractual acceptance does not replace that consent. You may contact us about the basis for a particular use.

When you submit a URL or X @handle, we retrieve public page information to identify the destination and review it. If configured, Firecrawl receives the submitted URL and retrieves rendered page text and metadata. Otherwise, or if it fails, our own public-page reader may retrieve the page. The destination website and its infrastructure can observe those requests. Firecrawl may use a recent cached page.

For supported social profiles, unavatar.io receives the platform and public handle to resolve a profile picture. A failed lookup falls back to available page metadata. We do not request social passwords, private messages or access to private accounts. Preview images loaded from a third-party host may reveal your IP address and browser information to that host.

Public page text, title, description and the submitted URL are sent to OpenAI for automated content review when configured. Inngest runs the review and payment workflows and may retain workflow inputs, results and diagnostic records. A review can reject or delay a link; it is not a decision about your creditworthiness or legal status. Contact hello@mostvaluablelink.com to request a review of an incorrect result.

When advertising is enabled for a platform, Meta Pixel, X Pixel and TikTok Pixel measure visits, content views, submissions, checkout starts and purchases. We also send Stripe-confirmed purchase events through Meta’s Conversions API, X’s Web Conversions API and TikTok’s Events API. These can include payment value and currency, shared event identifiers, campaign and ad-click identifiers, Meta and TikTok browser cookies, browser user-agent, request IP address and a hashed checkout email.

Hashing an email is a matching safeguard, not anonymisation: an advertising platform may match it to an account it already knows. Meta, X and TikTok may combine events with other information and use them under their own policies. We use this data to attribute results, evaluate campaigns and avoid counting the same conversion twice.

We do not sell personal information for money. Sharing identifiers with advertising platforms may qualify as a sale, sharing or targeted advertising under some privacy laws even without monetary payment. We do not describe this site as free of advertising trackers or cross-site measurement.

The site currently has no in-site advertising consent or preference panel, and browser Do Not Track or Global Privacy Control signals do not automatically switch its advertising off. Browser tracking protections and the platforms’ own privacy controls can limit some collection; they may not stop server-side reporting of an existing payment. Contact hello@mostvaluablelink.com to exercise applicable opt-out or other privacy rights.

mvl_visitor: a random visitor identifier, set for up to one year, used for the visitor counter and repeat-click handling. mvl_review: an HTTP-only token, set for up to two hours, used to access your submission status. Our database stores a hash of the review token. A review or checkout may expire sooner than the cookie.

mvl_attribution: when advertising is active, campaign parameters, referral origin and Meta/X/TikTok click identifiers are kept in a browser cookie for up to 90 days. mvl_ad_events: local storage helps deduplicate conversion reports; entries older than 30 days are ignored and removed when the record is next rewritten. TikTok’s _ttp browser identifier, when present, is also captured with a submission for conversion matching. Meta, X, TikTok and Stripe may use their own cookies or similar technologies under their policies.

Vercel Web Analytics, when loaded on a Vercel deployment, provides aggregate page, referral, location and device statistics. Clearing or blocking browser storage can reset your visitor number or prevent access to an existing review. Clearing cookies does not erase public listings or server-side payment and submission records.

Recipients include Stripe for payments and fraud prevention; hosting, database and infrastructure providers for storage and delivery; Vercel for hosting and analytics when used; Firecrawl and unavatar.io for public metadata; OpenAI for content review; Inngest for background workflows; and Meta, X and TikTok for advertising when enabled. We do not send checkout emails or card details to Firecrawl or the avatar service as part of enrichment.

Providers process information under the terms and privacy arrangements applicable to their services, and some act independently for their own legal, security or advertising purposes. Their policies include Stripe, Vercel, Firecrawl, OpenAI, Inngest, Meta, X and TikTok for Business.

We may also disclose necessary information to comply with law, respond to valid legal requests, protect people or our rights, obtain professional advice, or complete a business transfer subject to applicable privacy protections.

Public listings and associated payment and review records are retained while needed to operate the placement and history. Payment, refund, tax, terms-acceptance and dispute records may be kept afterward for applicable accounting, legal and limitation periods. Unpaid or failed submissions, security logs and provider workflow records may remain as needed for support, abuse prevention and troubleshooting. We assess deletion requests against those purposes and legal exceptions.

Cookie lifetimes are not automatic deletion deadlines for server or vendor records. Copies of attribution captured with a submission can remain with that record. We use access controls, limited public data projections and other safeguards, but no system can guarantee absolute security. Backups and third-party retention are subject to their respective processes.

Depending on applicable law, you may request access, correction, deletion or a portable copy of your information; object to or restrict certain uses; withdraw consent where processing relies on it; or opt out of sale, sharing or targeted advertising. You may also have rights concerning sensitive information, authorised agents, appeals and complaints to a supervisory authority. We do not use sensitive personal information to infer sensitive characteristics about you.

Send requests to hello@mostvaluablelink.com. Include enough information to identify the record, such as the submitted URL and checkout email, but no card details. We may reasonably verify identity or an agent’s authority before disclosing, changing or deleting records. We respond within applicable deadlines, explain exceptions or refusals, and accept appeals through the same address. We do not penalise you for exercising a protected right.

A removal or deletion request may remove a public listing or affect our ability to provide it. A delivered placement is not automatically refundable solely because you request deletion; mandatory rights and the refund terms still apply. You can complain to the relevant privacy regulator without first contacting us.

Our service and providers may process information in the United States and other countries with different privacy laws. Where applicable law requires safeguards for a transfer, those requirements continue to apply, including contractual or other recognised safeguards where appropriate. Contact us for information about a particular provider or transfer.

Purchases are for adults who meet the eligibility requirements in our terms. The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has submitted information, contact hello@mostvaluablelink.com so we can investigate and remove it where required.

We update this page and its revision date when our practices change. For material changes, we provide additional notice where required. A policy update does not supply consent or remove rights that applicable law protects. Privacy requests and questions for MostValuableLink.com: hello@mostvaluablelink.com.