Privacy Policy

What data we collect

We process only what is needed to run the catalogue and keep it honest:

• Account data - email address, nickname, avatar and, if you sign in with Google, the profile identifier Google returns. Passwords are stored only as salted hashes.
• Content you submit - servers and projects you add, verification requests, reviews, replies, votes and messages sent through the feedback form.
• Technical data - IP address, country derived from the IP, browser type, pages viewed and timestamps. We use it for security, vote-integrity checks and aggregated statistics.
• Payment data - for paid promotion we store the order identifier, amount and status. Payments are handled by an external provider; we never see card or wallet details.
• Correspondence - emails you send us and the notifications we send you (for example, email verification).

Why we process it

• To provide the service: show listings, keep you signed in, publish your reviews and votes, let server owners manage their projects (performance of a contract).
• To protect the catalogue: detect duplicate accounts, bot votes, fake reviews and abuse (legitimate interest).
• To understand how the site is used and to measure advertising campaigns (legitimate interest; in the EEA, the United Kingdom and Switzerland - only with your consent).
• To comply with legal obligations, for example accounting records for paid services.

Cookies and similar technologies

Essential cookies keep the site working: the sign-in session (nuxt-session), your language choice (language-choice, one year), a short-lived language suggestion (suggested-language, 24 hours) and your cookie decision (l2l_consent, one year). These do not require consent.

Analytics and advertising cookies are set by Google Analytics 4 and Google Ads (_ga, _ga_*, _gcl_*). They help us count visits, understand which pages are useful and measure whether advertising brings players. IP addresses are truncated before storage.

We use Google Consent Mode v2. If you are in the EEA, the United Kingdom or Switzerland, analytics and advertising storage stay disabled until you accept them in the banner; only cookieless, aggregated signals are sent. Elsewhere these cookies are enabled by default, as permitted by local law.

You can change your decision at any time via “Cookie settings” in the footer, or delete cookies in your browser. The site keeps working without analytics or advertising cookies.

Google Analytics and Google Ads

Google LLC processes analytics and advertising data on our behalf. We enabled IP anonymisation, disabled data sharing beyond what is needed for reporting and do not upload personal identifiers such as email addresses to Google.

How Google uses data from sites that use its services is described at policies.google.com/technologies/partner-sites. Transfers to the United States rely on the EU-U.S. Data Privacy Framework and standard contractual clauses.

Who we share data with

We do not sell personal data. It is shared only with providers who help us run the site, under contracts that limit what they may do with it:

• Hosting and infrastructure providers located in the European Union.
• Google (analytics, advertising measurement, optional sign-in with Google).
• The payment provider that processes cryptocurrency payments for paid promotion.
• Email delivery infrastructure used for account and notification emails.
• Public authorities when the law requires it.

How long we keep data

• Account data - while your account exists and for up to 30 days after deletion, so that accidental deletions can be reversed.
• Reviews and votes - while the related project is listed; deleted reviews are removed from public pages immediately.
• Security and access logs - up to 12 months.
• Payment records - as long as accounting law requires.
• Analytics - in aggregated form; Google Analytics user-level data is retained for 14 months.

Your rights

Depending on where you live, you may have the right to access the data we hold about you, correct it, have it deleted, restrict or object to processing, receive a copy in a portable format and withdraw consent at any time without affecting earlier processing. Residents of the EEA and the United Kingdom may also lodge a complaint with their supervisory authority.

To exercise these rights, email us from the address linked to your account. We answer within 30 days. Profile data can be edited directly in your dashboard; account deletion is done on request.

Security

All traffic is encrypted with HTTPS. Passwords are hashed, administrative access is restricted and logged, and the infrastructure is monitored for unusual activity. No system is perfectly secure, so please use a unique password and keep your email account protected.

Children

L2Links is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

When we change this policy we update the date at the top of the page. Material changes are announced on the site before they take effect.