Privacy & data
What MissingLinkz collects, why it is collected, how long it is kept, and how to have it removed. Last updated 3 September 2026.
Who runs this
MissingLinkz is built and operated by Andy Mills, a sole trader in the United Kingdom, trading as GoodVibeMarketer. There is no company behind it and no team. For anything on this page, including a deletion request, email [email protected].
Current status of the service
MissingLinkz is in maintenance mode. The free tier, the CLI, the MCP server and the free report all work and will keep working, and signups are open. What has stopped is active development and new publishing. There is no support commitment and no paid plan on sale. This is stated here rather than buried, because you should know what you are signing up to before you hand over an email address.
What is collected, and why
- Your email address — if you create an account
- Used to identify your account, issue your API key, and send you a verification email. Nothing else. There is no newsletter, no marketing sequence, and your address is never sold, shared or passed to an advertiser. The legal basis is performing the service you asked for.
- Your API key — stored only as a hash
- The key itself is shown to you once and never stored in a form we can read back. We keep a one-way hash to check the key you present, plus the first few characters so you can tell your keys apart. If you lose a key it cannot be recovered, only replaced.
- Your IP address — briefly, for rate limiting
- Requests to the free report and the API are counted against a short-lived bucket keyed by IP so one visitor cannot exhaust the service for everyone. These buckets expire within the hour and are deleted automatically. They are not used to profile you, are never joined to your account, and are not used for analytics.
- URLs you submit for checking
- When you run a free report we fetch the URL you give us and store the result so the report has a permanent, shareable address. The stored record contains the URL you submitted and the check results — not the page content. Please do not submit URLs that contain personal data or secrets in the query string; a report page is public to anyone holding its link.
- Usage counts
- A count of links validated in the current billing period, so the free tier limit can be enforced. A number, not a history of what you checked.
- Website analytics
- This site uses Google Analytics to count page views and understand which articles are read. The API itself does not. If you would rather not be counted, any standard tracker blocker or your browser's Do Not Track setting will stop it.
How long things are kept
- Free reports run without an account — 90 days
- A report created by the public free-report tool is deleted automatically 90 days after it is created, along with its shareable link. That is long enough to outlive a campaign cycle and short enough that anonymous scans do not pile up forever. If you claim the report by creating an account, it stops being anonymous and is kept with your account instead.
- Account data — until you ask us to delete it
- Your account, keys and reports are kept while the account exists. Email [email protected] from the address on the account and it will be deleted, in full, along with everything attached to it.
- Rate-limit records — about an hour
- Deleted automatically as they expire.
Who else touches your data
Only the services needed to run this, and only for that purpose:
- Cloudflare — hosts the website, the API and the database. All stored data lives here.
- Stripe — would handle payment if a paid plan is ever purchased. Card details go directly to Stripe and are never seen or stored by MissingLinkz.
- Resend — delivers the account verification email.
- Google Analytics — website page views only, as above.
Nobody else. No data broker, no advertising network, no analytics resale.
Your rights
Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be erased, and you can object to how it is used. Email [email protected] and it will be actioned within 30 days. There is no form to fill in and no account tier required.
If you are unhappy with the response, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this page
If this notice changes materially, the date at the top changes with it. Given the service is in maintenance mode, the most likely future change is a notice that it is shutting down — in which case account holders will be emailed before any data is deleted.