Privacy Policy
Effective August 31, 2026
openin.app makes short links that open social content in native apps instead of in-app browsers. This page explains what we collect to make that work, in plain language.
What we collect
Account information. If you create an account, we receive your email address and — when you sign in with Google — your name and profile photo. Authentication is handled by Supabase.
Links you create. The destination URL and the short slug. Links can also be created without an account.
Click analytics. When someone opens a short link we record the time, device type (Android, iPhone, desktop), the app the click came from where detectable (for example Instagram), the browser's user-agent string, the referring page, and a two-letter country code derived at our hosting provider's edge. We do not store IP addresses with clicks, and we don't use click data to build profiles of the people clicking.
Payments. Pro subscriptions are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only a customer reference and your subscription status.
Site analytics. We use Vercel Web Analytics, which is cookieless and aggregate — it tells us how many people visit, not who they are.
Creator tracking pixels. Creators on our Pro plan can connect their own analytics and advertising tools to their pages and links: Google Analytics, Meta (Facebook) Pixel and TikTok Pixel on their bio page, and server-side click events to Google Analytics and Meta's Conversions API for their short links. If a creator has these enabled, opening their page or links sends event data (including, for Meta's Conversions API, your IP address and browser user-agent) directly to those providers on the creator's behalf, under that provider's privacy policy. We forward this data but do not store it. Whether and how a creator uses these tools is the creator's responsibility.
Cookies
We set only the essential cookies needed to keep you signed in. No advertising cookies, no cross-site tracking.
How we use this information
To route clicks to the right app, show creators analytics for their own links, run subscriptions and billing, and prevent abuse of the service. We don't sell your data, and we don't share it with anyone except the service providers below.
Service providers
Your data is processed by the infrastructure we run on: Supabase (database and authentication), Vercel (hosting and aggregate analytics), Stripe (payments), and Google (only if you choose Google sign-in). When a creator connects tracking pixels, event data also flows to that creator's chosen providers (Google, Meta, TikTok) as described above. Data is stored in the United States.
Retention and deletion
Links and their click statistics are kept while they exist. Deleting a link from your dashboard permanently deletes its click data too. To delete your account and everything in it, email us at the address below and we'll take care of it.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email us and we'll respond within 30 days.
Changes
If we change this policy we'll update this page and the date at the top. Meaningful changes will be called out on the site.
Contact
See also our Terms of Service.