Privacy policy

01Who is responsible

Unlocky Media LLC operates unlocky.me. Our registered address is 30 N Gould Street, Sheridan, Wyoming 82801, USA. For privacy questions, contact support@unlocky.me or use the Privacy Information Request page to save a support request.

This policy covers our public website, creator workspace, and published profile and product pages. Your email provider and external websites you visit have their own privacy practices.

02Account information and content

Creating an account provides your name, email address, username, and password. We store a password hash rather than a readable password. We also store account and session dates, your profile settings and biography, local image uploads, link destinations, product descriptions and prices, uploaded private files, saved drafts, and your selected plan preference.

We use this information to sign you in, protect your account, save your changes, publish the pages you choose to publish, provide owner access to private files, and show your activity reports. Choosing a plan does not start billing or purchase credit.

Published profiles and product listings display the information you choose to make public. Your account email, password hash, session details, and private product files are not included in public profile or product responses. Information you put into your public biography, links, or descriptions can still be seen by visitors.

Marketing playgrounds and calculators remain local examples. Their sample fields do not create an account or save changes to your creator workspace. Use the signed-in dashboard to manage your actual content.

03Views, clicks, and aggregate creator reports

Visiting a published creator profile or product, or opening an enabled profile link, records an activity event for that creator. Events contain the action, the relevant page or link, a timestamp, the referring hostname, a coarse device category such as mobile or desktop, and a hashed event identifier. Events may also include sanitized campaign tags and whether a consenting visitor has interacted before. Full referrer paths, query strings, raw IP addresses and raw visitor cookies are not stored. Country is Unknown unless a trusted country source is configured.

The application does not store raw IP addresses, raw visitor tokens, or account email addresses in analytics events. Creators see aggregate counts, dates, sources, devices, and popular links and products; these reports do not identify visitors by name or email. Default events use a fresh random identifier for each request and do not require a persistent visitor cookie.

If you opt in to the optional first-party visitor identifier, the service can recognize repeated events from the same browser for the same resource within a minute and avoid counting those repeats. The stored identifier is hashed using a private persistent server key. This is not cross-site identity tracking.

Actual verified free claims and completed payments are distinct from marketing examples. Paid checkout remains off until PayPal is connected. Marketing maps, example profiles, and sample charts are labeled illustrations and are separate from actual account reports.

04Cookies and your analytics choice

The essential unlocky_session cookie keeps you signed in for up to seven days. It is protected from access by page scripts and uses a secure connection in production. Signing out expires the current session. This cookie is separate from optional analytics and is required to use a signed-in account.

The unlocky_analytics preference records whether you allow the optional visitor identifier. Only an opt-in value of 1 permits the first-party unlocky_visitor cookie, which can last up to 365 days. Without that choice, the application still records aggregate view and click events but does not set a persistent visitor identifier.

Use the site’s privacy controls to change this choice. Turning it off stops identifier use and expires an existing visitor cookie when an activity request reaches the service. Do Not Track and Global Privacy Control signals also prevent identifier use and cause the visitor cookie to expire. They do not disable essential sign-in or the default aggregate event counts.

You can also clear unlocky.me cookies and other site data through your browser. Clearing the session cookie signs you out. The website does not use advertising pixels, cross-site advertising cookies, or third-party ad tracking scripts.

05Operational requests and external resources

Your browser sends standard request details, including its IP address, requested resource, and browser information, to the infrastructure serving the site. Hosting infrastructure may process operational or security logs independently of the application’s aggregate analytics records.

Fonts, site assets and uploaded profile/product images are served by unlocky.me. Image controls accept local files, not third-party image addresses. Following an external profile link sends a request to that destination under its own privacy practices. Social accounts connect only after the relevant app is configured and you approve OAuth access. Access and refresh credentials are encrypted in the independent database. We store the connected account reference, scheduled post payloads, delivery state and relevant comment/reply identifiers to operate the selected features. Disconnecting removes local credentials and stops pending work; provider permissions can also be removed in that platform’s settings.

06Contact forms and correspondence

Contact, privacy and report forms send the category, subject, message, optional contact address and related resource reference to our support system. Signed-in requests are linked to your account so you can read portal replies. Anonymous request reference numbers do not grant access or verify ownership. When you email us, we receive your address, name if provided, message, and any attachments you choose to send.

We use correspondence to answer questions, assess reports, handle privacy requests, and keep records relevant to the matter. Please avoid unnecessary sensitive information. Contacting support does not enroll you in a marketing mailing list. Account verification and password-recovery emails are not delivered by this release.

07Sharing and service providers

We do not sell personal information or share it for targeted advertising. Hosting and email providers may process information as needed to operate the website and handle correspondence. Creators receive their aggregate activity reports and the public content visitors choose to view; the reports do not include visitor account emails or raw IP addresses.

We may disclose information where required by applicable law, to respond to valid legal process, or as reasonably needed to address fraud or security issues or protect legal rights. When enabled, PayPal processes payment approval; we retain order references, verified payment status, amounts and merchandise addresses needed for fulfillment. Card numbers and card security codes never enter this app. Drafts stay local to this service until an authorized person queues publication or enables a connected rule. Connected providers receive the selected content and necessary account information when those features run.

08Retention, deletion, and security

Account details, content, private uploads, drafts, saved preferences, and activity records remain while your account exists, unless you delete the relevant content earlier. Account deletion in Settings requires your current password and removes your account and unpurchased content, activity and sessions. Accounts or products with pending or completed purchases cannot be deleted through self-service while delivery obligations remain; contact support for help. Purchase, refund and subscription records may be retained for fulfillment, disputes and applicable recordkeeping. Private recovery backups may retain deleted records for up to seven daily recovery points; they are restricted to recovery and are not used for ordinary account activity. It also ends access to your published pages. We do not promise removal of copies previously saved by other people or external services.

Session cookies expire within seven days; the optional visitor cookie lasts up to 365 days unless removed earlier. Support requests and portal replies remain as needed to handle the request, security reviews and disputes. Support correspondence and operational records may be retained as needed to handle the matter, meet legal obligations, and address security or disputes. Ask us about information relating to you if you need more detail.

We use account access controls, password hashing, and protected sessions, but no transmission or storage method provides an absolute security guarantee. Keep your password private and keep your own copies of important content. Do not send passwords or payment details through ordinary email.

09Your choices and privacy rights

In your signed-in dashboard you can review and edit your profile, links, listings, drafts, and account details, export aggregate reports, unpublish pages, and delete your account. Changes to an account email or password, and account deletion, require your current password. You can change your optional analytics choice using the site’s privacy controls.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, obtain a copy of information, or restrict or object to certain processing, subject to lawful exceptions. Email support@unlocky.me or use Privacy Information Request. We may ask for limited information needed to verify a request; do not include identity documents in your initial email.

We will handle applicable requests within the time required by law. You may also have the right to appeal a decision or contact your local privacy authority.

10Children, international visitors, and changes

Accounts are for adults aged 18 or older under our Terms. The service is not directed to children under 13, and children must not create accounts. We do not claim that an account’s age or identity has been verified. Contact us if you believe a child has provided personal information so we can assess and address it.

Unlocky Media LLC is based in the United States. Information may be processed in the United States or wherever our operational providers process it. Applicable protections and rights depend on the circumstances and law.

We will update this policy when our practices change and provide relevant information before enabling additional data collection or payment services. The date above identifies this version. Contact support@unlocky.me or write to Unlocky Media LLC at our registered address with questions.