Terms of Service
These Terms of Service ("Terms") govern your use of linkrypt
("we", "us", "our"), operated by
IZZY.Agency.
By creating an account or otherwise using the service, you agree
to these Terms. If you do not agree, do not use the service.
Last updated: 2026-05-23-v2.
1. Service
linkrypt is an end-to-end-encrypted secret-sharing service. You encrypt content in your browser before it reaches us; we store only the resulting ciphertext together with a minimum of metadata required to deliver the share (expiry, view count, recipient hash if provided). The decryption key lives in the URL fragment, which never reaches our servers. As a consequence we cannot read, search, index, or recover what you share. This zero-knowledge invariant is a structural property of the service, not a marketing claim; the detailed security model is described in our Privacy Policy.
2. Eligibility and account
You must be at least 15 years old to create an account. One account per person; shared or machine-operated accounts are not permitted on the consumer plans. We authenticate you via magic links delivered to the email address you registered with; you are responsible for keeping that inbox secure and for promptly revoking sessions if you suspect compromise. You may not transfer your account to another person. We may suspend or terminate accounts that we reasonably believe violate these Terms or that put the service, other users, or third parties at risk.
3. Acceptable use
You agree not to use linkrypt to host, store, share, or distribute: (a) content that is illegal in the jurisdiction where you, the recipient, or the operator is located, including content depicting child sexual abuse, terrorism, or credible threats of violence; (b) malware, ransomware, exploit payloads, phishing kits, or material intended to compromise third-party systems; (c) content that infringes third-party intellectual property, privacy, publicity, or other rights; (d) content that you do not have the lawful right to share. You may not use the service to bypass our abuse-detection, rate-limiting, or anti-bot controls, nor to send unsolicited bulk communications. We accept abuse reports at /abuse and may freeze the metadata envelope of a reported share pending review; the zero-knowledge invariant is preserved at all times — we never decrypt.
4. Payment terms (Pro plan)
The Pro plan price and billing interval are displayed at /pricing. Payments are processed by Stripe under their own terms; we never receive or store your full payment card number. Subscriptions renew automatically at the end of each billing period until you cancel. You may cancel at any time from the Stripe Customer Portal accessible at /app/billing; cancellation takes effect at the end of the current paid period and you retain Pro features until then. We offer a 14-day refund window from the date of payment, processed manually via Stripe on email request to the legal contact in §12; after that window payments are non-refundable except where required by applicable consumer protection law. Price changes apply only to billing periods that begin after the change is published and you are notified.
5. Service availability
We provide linkrypt on a best-effort basis. We do not offer a contractual service-level agreement (SLA) or uptime guarantee on the Free or Pro plans. Current status, incident history, and maintenance windows are published at /status. We may perform planned maintenance, deploy security patches, or temporarily restrict access where required to protect the service or its users, and will use commercially reasonable efforts to minimize impact. The service may be unavailable due to factors outside our control (upstream provider outages, network failures, force majeure events); we accept no liability for such interruptions beyond what is required by applicable law.
6. Data and privacy
Our handling of personal data is described in the Privacy Policy, which forms an integral part of these Terms. The zero-knowledge invariant — we cannot read your share content — is enforced by our architecture (client-side AES-GCM encryption with the decryption key in the URL fragment, which by HTTP specification is never transmitted to our servers) and is independently auditable from our open-source code. We process the minimum metadata necessary to operate the service (account email, subscription state, opaque share envelope) and retain it only as long as needed for the purposes set out in the Privacy Policy.
7. Termination
You may delete your account at any time at /account/delete; deletion triggers a full cascade — cancellation of any active Stripe subscription, deletion of your account record and personal data from our database, and deletion of stored ciphertext from object storage — typically completed within minutes and in any event within thirty (30) days. We may suspend or terminate your account for material breach of these Terms, for repeated minor breaches after notice, or for legal compulsion, with prior notice when reasonably practicable. On termination by either party your shares and account data are deleted as described in our Privacy Policy; provisions of these Terms which by their nature should survive (Liability, Indemnification, Governing law) shall so survive.
8. Liability
linkrypt is provided "as is" and "as available" without warranty of merchantability, fitness for a particular purpose, or non-infringement, except as required by applicable law. We do not warrant that the service will be uninterrupted, error-free, or that any specific result will be achieved. To the maximum extent permitted by law, our aggregate liability for any claim arising from or related to your use of linkrypt is limited to the greater of (i) the fees you paid us in the twelve (12) months preceding the event giving rise to liability, or (ii) fifty euros (€50). We are not liable for indirect, incidental, consequential, special, exemplary, or punitive damages, nor for loss of profits, revenue, goodwill, business opportunity, or data (including loss of plaintext recoverable only from a URL fragment that you, the recipient, or a third party failed to preserve). We are not liable for the content you share, for your compliance with laws applicable to that content, or for the actions of third parties (including recipients, forwarders, or interceptors of links you choose to send). Nothing in these Terms excludes or limits liability that cannot lawfully be excluded under applicable law, including consumer protection statutes and rules governing fraud or willful misconduct.
9. Indemnification
You agree to indemnify, defend, and hold harmless linkrypt and its operators, employees, contractors, and affiliates from and against any claim, demand, loss, liability, or expense (including reasonable legal fees) arising from or related to (a) your use of the service in violation of these Terms or of applicable law, (b) content that you share through the service, or (c) your violation of any third-party right. We reserve the right to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which case you will cooperate with our defense.
10. Changes to these Terms
We may update these Terms from time to time. Material changes — including changes to price, refund window, governing law, liability cap, sub-processor list, or addition or removal of a section — will result in a new version identifier and a re-acceptance prompt on your next sign-in; you may decline, in which case you can continue to delete your account or export your data but will no longer be able to use the service. Non-material changes (typo fixes, link updates, translation refinements, clarifications without substantive effect) ship without a new prompt. The current version identifier is shown at the bottom of this page; the operator runbook governing the bump process is published in our public repository.
11. Governing law and dispute resolution
These Terms are governed by the laws of France, without regard to its conflict-of-law principles. Mandatory consumer protection rights afforded by the law of your country of residence — including, where applicable, the European Union consumer protection directives — are expressly preserved and take precedence over any conflicting provision in these Terms. We prefer informal resolution first: before initiating formal proceedings, please contact us at the address in §12 so we can attempt to resolve the issue. If a dispute cannot be resolved informally, the courts of the governing jurisdiction will have exclusive jurisdiction, subject to your mandatory consumer right to bring proceedings in the courts of your country of residence.
12. Contact
Questions about these Terms, exercise of legal rights, or formal notices: legal@linkrypt.sh. General inquiries: hello@linkrypt.sh. Abuse reports: /abuse. Account deletion and data export: /account/delete. Operating legal entity: IZZY.Agency.