At HISLINKS, your privacy matters
Meeting people should feel relaxed and safe.
That's why HISLINKS has treated privacy and security as core principles from day one of product design — not as features bolted on afterwards.
🔐 We don't store your password
HISLINKS recommends signing in with a third-party provider, such as:
- Apple
- Other OAuth providers (subject to actual availability)
With third-party sign-in, you don't need to create or manage a new password.
If you choose to sign in with Email + Password:
- Your password is verified and managed directly by Supabase Authentication.
- HISLINKS never receives, stores, or verifies your password itself.
- We have no way of knowing your password.
💡 Security tip: Use a different password for every website and service, and turn on two-factor authentication (2FA) wherever you can. That way, even if one site suffers a data breach, your other accounts stay safe — it's one of the most effective habits for protecting your accounts.
💬 Your chats are protected
Chat content is accessible only to the participants of that chat.
We apply multiple layers of protection, including:
- HTTPS / TLS encryption for all data in transit.
- Chat data protected by mature, industry-standard cloud security — encrypted transit, encrypted storage, and access controls.
🔥 Burn feature
HISLINKS offers a burn feature so you can share with more peace of mind.
Content shared with burn expires automatically after the time you set, and is deleted from the system once expired — it is not retained on our servers.
In the future, the burn feature will support more content types, continuing to provide a safer, more private sharing experience.
🖼️ We protect your photos
Both public and private photos are protected by multiple security layers.
Including:
- Access control verification
- Signed URLs
- Every image uses a dedicated, time-limited secure link
- Once a secure link expires, it can no longer be accessed
- Unpredictable resource identifiers (hashes)
- Access permission controls
These measures significantly reduce the risk of URL guessing, unauthorized sharing, or bulk scraping of images.
📷 We can't snoop through your photo library
When you upload a photo, HISLINKS uses your device's built-in photo picker instead of accessing your library directly. This means:
- We only receive the specific photo you choose yourself.
- The other photos in your library are completely invisible to us — we can't read them.
- Even if you grant "Full Access" to your photo library in your system settings, the method we use still cannot browse or scan the rest of your library.
💡 Security tip: Not every app obtains photos through the system's built-in photo picker like this — some access your library directly, and once you grant "Full Access," they can read every photo in it. So with any app, if you ever have doubts, it's best not to grant "Full Access." Instead, select the specific photos you want to share — keeping that choice in your own hands is one of the simplest and most effective privacy habits.
🔗 Your web page: off by default, entirely your call
Your HISLINKS web page (a shareable profile that lives outside the app) is off by default, and making it public is strictly opt-in.
- Off (default): No one can find you on the web — they can't even tell whether you have a HISLINKS account.
- Partial: Shows only your avatar, name and page style — nothing else.
- Public: Shows the full page you've chosen to make public.
A few more things:
- You can switch it back off anytime in the app.
- Scanning your QR code in person follows the app's own permission rules and is not affected by this setting.
- In other words, simply using the app never puts you on the web — whether you're publicly visible is entirely up to you.
💡 Safety tip: If privacy matters to you, just leave it off; turn it on only when you want to share your page, and switch it off again whenever you like.
❤️ Always improving security
Privacy and security aren't a one-time feature — they're an ongoing effort.
HISLINKS continuously reviews its architecture, security mechanisms, and data protection measures, improving in line with industry best practices so everyone can connect in a safe, trustworthy environment.