Privacy Policy

Who handles your information

erev.lol operates from the Philippines and determines how personal information is used to provide its biolink service. This notice covers account holders, visitors to profiles, and people contacting support. The operator and contact information shown below apply to privacy requests.

Information you provide

We process account details such as your email, account identifier, username, role, and plan status. Authentication is handled through Supabase. Profile data may include your display name, description, links, uploaded images, GIFs, audio, videos, badges, saved templates, customization settings, and onboarding answers.

When you connect Discord, we process connection identifiers and the profile or presence information needed for the feature, such as your Discord name, avatar, status, and activities. Support requests include the message and account or purchase information you choose to provide.

For payments, we receive purchase references, customer identifiers, payment or entitlement status, and relevant refund or dispute information. Payment details are processed by the provider shown at checkout; our profile application does not store full card numbers or card security codes.

Visitor information and analytics

Our servers and infrastructure providers process technical data such as IP addresses, request times, browser or device information, and error or security logs to deliver and protect the service.

The application derives a hashed visitor key from an IP address and a server secret for rate limiting and repeated-view or repeated-click suppression. This is pseudonymous information, not a guarantee of anonymity. Profile and link analytics contain aggregate counts; link records also include the link identifier, title, destination, and last-click time. The analytics feature does not give profile owners a list of visitors’ identities or raw IP addresses.

Hiding a public view counter changes its visibility; it does not necessarily stop the underlying measurement. Visiting a profile and clicking an outbound link are separate events.

Why information is used

We use information to create and secure accounts, save and publish profiles, serve media, connect requested integrations, verify purchases, provide support, measure views and link clicks, prevent abuse, and meet legal obligations.

Depending on the activity and applicable law, processing relies on performing our agreement with you, complying with legal obligations, legitimate interests in operating and securing the service, or consent where required. Where processing relies on consent, you can withdraw it; that does not undo processing already lawfully performed.

What becomes public

Published profile names, descriptions, links, selected media, badges, and enabled Discord details can be seen by visitors and may be indexed by search engines. A profile may appear in the administrator-selected landing-page showcase. Contact support to request removal from that showcase.

Draft content is not displayed as a published profile. However, uploaded media may be served from public storage URLs. A media URL can remain accessible to someone who has it; do not upload confidential documents or sensitive private material. Making a profile private or removing a link does not guarantee every previously shared copy disappears.

Providers and other recipients

We use Supabase for authentication, database, and media storage, and Vercel for website hosting and delivery. Connected Discord features use Discord and the configured presence service. Pages using Google Fonts or Discord-hosted images can send technical request information to those providers.

The payment provider identified on your checkout and receipt processes payments under its own privacy notice. If a merchant of record is used, that company may act as an independent controller for payment, tax, and compliance purposes. We share information with service providers only as needed for their role, and with authorities or advisers when lawfully required or necessary to protect rights and address fraud.

Opening an external profile link takes you to a service governed by its own privacy practices. We do not sell personal information or provide visitor identities to profile owners through our analytics feature.

Cookies and similar technology

Authentication cookies keep you signed in and help protect account sessions. Temporary cookies may also protect an integration’s connection flow. Browser settings can block or remove cookies, but doing so may prevent login or other requested features.

The current profile analytics implementation sends first-party view and click requests rather than using advertising cookies. Third-party checkout or linked services may use their own cookies. If optional advertising or tracking tools are introduced, we will update this notice and obtain consent where required.

Retention, deletion, and security

Account and profile information is retained while needed to provide your account and requested services. Payment, security, and support records may need longer retention to meet legal obligations, resolve disputes, or prevent fraud. Retention depends on the category, purpose, and applicable obligations; this notice does not promise an immediate deletion of every record.

You can request account or data deletion through support. Eligible records are removed or de-identified, while information that must be retained is restricted to the reason for retention. Backup copies may persist until the relevant backup cycle expires. Public caches and copies controlled by other people are outside our direct control.

We use access restrictions, authentication, and technical safeguards to protect information. No online service can guarantee absolute security. Providers may process information outside the Philippines; where required, we use appropriate contractual or other safeguards for international transfers.

Your choices and rights

You can edit profile information, remove links or media, disconnect optional integrations, and unpublish your page through the available account controls. Contact support for requests that are not available in the editor.

Subject to applicable law, you may request access, correction, deletion or blocking, a portable copy, restriction, or objection to processing, and withdraw consent where it is the basis for processing. We may need proportionate information to verify a request. Do not send passwords or full payment-card details.

You may complain to the Philippine National Privacy Commission at privacy.gov.ph, or to the relevant authority where you live. Using support first is optional and does not limit that right.

Children and changes

The service is not intended for children under 13 or a higher minimum age required locally. Contact us if you believe a child has provided information contrary to this requirement so we can investigate and take appropriate action.

We update this notice when practices change and show the revision date. Material changes will be communicated through the service or account email where appropriate.