Acceptable use and security policy

Version 2026-10-16.1 · 16 October 2026

Responsible use

Do not use Capybara Link for phishing, malware, credential theft, fraud, illegal content, harassment, unsolicited bulk messaging or evading access controls. You are responsible for the links and content you publish and for protecting access to your account. We may restrict content or accounts to investigate abuse, protect the service or comply with applicable law.

Security and accountability

When this instance enables security auditing, we record account identifiers, time, action category, affected resource identifiers, request outcome and, if IP retention is enabled, the client IP reported through our trusted ingress. These are restricted operational security records used to investigate abuse, unauthorized access and service incidents. They are separate from optional product analytics and are not disabled by refusing optional analytics. The instance owner selects a security retention period of 30, 90 or 180 days. Records may be preserved longer where legally required or for a documented incident or claim. Infrastructure logs and backups have separate lifecycles.

Your signup record

We retain the version and hash of this document, your account identifier and the server time of acceptance. In Audit configurations with IP retention enabled, that record also includes the client IP. This provides evidence of the document accepted; it is not permission to collect unlimited data or a waiver of your legal rights.

Optional analytics and recordings

Accepting this policy does not authorize optional tracking. Detailed usage analytics, account-linked journeys, masked session replay and precise location have separate choices. Refusing or withdrawing those choices does not prevent ordinary use of the app. Passwords, authentication tokens, payment secrets and raw form contents are excluded from the analytics and replay pipeline. Session replay masks user content and inputs and excludes authentication, billing, security and operator pages.

Privacy and contact

Read the privacy notice for purposes, rights and the privacy contact, and the terms of service for the service agreement. Applicable law and mandatory consumer/data-protection rights continue to apply.

SHA-256: f09220b07811646d4a13ffc9e5e20b2dd8cd43e3b295e2dde022bf74744f2c08