Privacy Policy

Welcome to Wsla ("we," "our," or "us"). Wsla (وصلة, the Arabic word for "link") is a multilingual link-in-bio platform that brings all your important links, content, and social profiles together into one customizable Wsla profile at wsla.to.

We respect your privacy and are committed to protecting your personal data. This policy explains, in plain language, what we collect, how we use it, who we share it with, and the rights you have.

It should be read together with our Help Center and any product notices shown in your dashboard.

2.1 Information you provide

• Account details: name, email address, username, and password.
• Profile content: display name, bio, profile picture or logo, theme, links, sections, social handles, and any media you upload.
• Contact information: if you contact support or fill out a form.
• Payment details: billing information processed securely by trusted payment providers. *We never store full card numbers on our servers.*
• Communications: messages you send us by email, support ticket, or social channels.

2.2 Information collected automatically

• IP address and approximate location (country or region).
• Browser type, language, operating system, and device information.
• Pages and links visited, clicks, scroll depth, referrers, and session duration.
• Performance and error diagnostics that keep the platform fast and stable.

2.3 Information from third parties

If you sign in with a social provider or connect an external service, we may receive basic profile information such as your name, email, and avatar, as authorized by you and that provider.

3.1 To run and improve the service

• Create and maintain your account and public Wsla profile.
• Show your Wsla profile to visitors and process link clicks.
• Provide analytics for your profile and links — views, clicks, and top content.
• Process subscriptions, invoices, and refunds.
• Provide customer support and answer your questions.

3.2 To protect Wsla and our users

• Detect, prevent, and respond to fraud, abuse, spam, and security incidents.
• Enforce our Terms and applicable laws.
• Moderate prohibited or unsafe content reported to us.

3.3 With your consent

• Send marketing emails, product updates, and tips — you can opt out at any time.
• Use non-essential cookies, analytics, or third-party integrations you enable.

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

• Contract: to deliver the Wsla service you signed up for.
• Legitimate interests: to keep the platform secure, prevent abuse, and improve features.
• Consent: for marketing communications and non-essential cookies.
• Legal obligation: to comply with laws and respond to lawful requests.

Your data is hosted on secure cloud infrastructure operated by reputable providers. We apply industry-standard safeguards, including:

• SSL/TLS encryption for all data in transit.
• Encryption at rest for sensitive data and credentials.
• Hashed and salted passwords — never stored in plain text.
• Row-level security and access controls on our database.
• Regular security reviews, dependency updates, and monitoring.
• Strict, role-based internal access on a need-to-know basis.

• Active accounts: we keep your data while your account is active.
• Deleted accounts or profiles: personal profile data is removed promptly, with limited backups overwritten on a rolling schedule.
• Analytics data: aggregated and anonymized analytics may be kept for up to 12 months.
• Billing and legal records: kept as long as tax, accounting, and legal obligations require.

We do not sell your personal data. We share data only to operate Wsla, comply with law, or with your consent:

• Service providers: hosting, databases, email delivery, analytics, support tools, and payment processors acting under contract for us.
• Legal authorities: when required by valid legal process or to protect rights, safety, and platform integrity.
• Business transfers: in a merger, acquisition, or asset sale, with continued protection of your data.
• Third-party integrations: only when you explicitly connect them to your account.

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Restrict or object to certain types of processing.
• Withdraw consent at any time where processing is based on consent.
• Opt out of marketing emails using the unsubscribe link in any email.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@wsla.to.

We use a minimal set of cookies and similar technologies:

• Essential cookies: required for login, security, and core functionality.
• Preference cookies: remember your language, theme, and settings.
• Analytics cookies: help us understand how the platform is used.
• Marketing cookies: set only with your consent.

You can control cookies through your browser settings or, where shown, our in-app cookie banner.

When someone scans a dynamic QR code created with Wsla, the scan passes through a short Wsla link before reaching your destination. We record a scan event containing the time of the scan, a coarse location (country and city), device family, operating system, browser, and the referring campaign or UTM parameters you attached to the code.

IP addresses are used transiently to derive that coarse location and to detect abuse; they are not shown in your reports and we do not use them to build advertising profiles or to track visitors across other websites. Reports are aggregated (totals, unique scans, trends, top locations, devices and browsers).

Static QR codes encode your destination directly inside the pattern. Scans never pass through Wsla, so no scan data is collected at all.

If you connect Google Analytics or Meta Pixel to a QR code, those third parties receive the scan event under their own privacy policies, and only where the visitor's consent allows it. You can disconnect them at any time. Password and age-confirmation gates only store the check needed to grant access for that session.

Learn more about the feature itself on the QR codes product page.

Wsla is not directed to children under 13, or the minimum age required in your country. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will remove it.

Wsla operates globally, so your data may be processed in countries other than where you live. When we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses and rely on providers with recognized data protection standards.

Wsla exists to help you share links to other sites and services. Once you or a visitor leaves Wsla through an external link, the destination site follows its own privacy practices. We are not responsible for the content or privacy practices of third-party websites. Please review their policies before sharing personal information.

We may update this Privacy Policy to reflect changes in our service, technology, or legal requirements. For material changes we notify you by email or an in-app notice before they take effect. The effective date at the top of this page always shows the current version.

We design our practices to comply with applicable data protection laws, including:

• The EU General Data Protection Regulation (GDPR).
• The UK Data Protection Act and UK GDPR.
• The California Consumer Privacy Act (CCPA / CPRA).
• Other regional privacy laws where Wsla operates.

To keep our commitments to you, we maintain:

• Internal privacy and security policies.
• Regular access reviews and security audits.
• Staff training on data protection and confidentiality.
• An incident response plan for security events.
• Documentation of our processing activities.

For any privacy-related question, request, or concern, reach out — we're happy to help:

You can also visit our Help Center for guides and frequently asked questions.