Privacy Policy
August 12, 202615 min read
Privacy Policy
Last updated: 22 September 2026
This is the privacy policy for Solu — the site at solu.page and every page served from it.
It explains, in simple terms, what information we collect, why we collect it, who may receive it, and what choices and rights you have.
1. Who is responsible
Solu is operated by an independent individual.
Contact email: hello@solulu.link
The person operating Solu is responsible for the processing of personal data described in this policy.
If you have questions, requests, or concerns about your data, you can contact us directly through the email above.
2. The short version
- Your account exists so you can create and manage your Solu page.
- We do not sell, rent, or provide your personal data to advertisers.
- There is no advertising network running on Solu.
- We use optional analytics to understand how Solu is used and improve the product.
- Analytics only starts if you choose to allow it. You can reject analytics and continue using Solu normally.
- Some cookies are necessary for authentication, security, and basic functionality. These are separate from optional analytics cookies.
- Page statistics are designed to provide page owners with useful, aggregated information without identifying individual visitors.
- Images uploaded to Solu may be checked automatically for safety purposes. This processing happens through our own infrastructure and images are not sent to external scanning services.
- Payments are processed by Stripe. Card details never reach or get stored on Solu servers.
- You can change or withdraw your analytics choice at any time.
- If you need your personal data removed, you can contact us at hello@solulu.link.
3. What information we collect and where it comes from
3.1 Information you provide
| What | Where it comes from |
|---|---|
| Email address | When you create an account or sign in |
| Username (your handle) | You choose it |
| Display name | You choose it |
| Page content | Links, text, images, stickers, layout, colours, and anything else you add |
| Mood check-ins | The day and your answers if you use this feature |
| Support messages | When you contact us |
When you request a sign-in code, we temporarily process your email address to send and verify that code.
If you choose to sign in with Google, we receive information provided by Google, such as your Google account identifier, email address, name, and profile picture where available.
We never receive your Google password.
We only request the information necessary to create and maintain your Solu account.
If you choose to connect your YouTube account to Solu, we receive the YouTube data that you authorize through Google's OAuth process using read-only access. This information is used only to provide the YouTube-related features you choose to use on your Solu page. We do not modify, create, or delete YouTube content on your behalf, and we do not receive or store your YouTube password.
You can disconnect your YouTube account from Solu at any time.
3.2 Information your browser sends us
When you use Solu, your browser may send technical information that is needed to operate and protect the service.
This may include:
- Browser and device information
- IP address
- Session information
- Technical information contained in normal server logs
This information is used for purposes such as authentication, security, abuse prevention, rate limiting, troubleshooting, and keeping the service running.
3.3 Optional analytics
If you choose to allow analytics, we use PostHog to understand how people use Solu and improve the product.
This may include information about:
- Pages and screens viewed
- Interactions with features
- General product usage
- Session activity
Analytics may also include session recordings to help us understand usability and improve the experience.
Analytics is optional and is only activated after you give consent.
If you reject analytics, or have not yet made a choice, optional analytics is not activated.
We do not use analytics for advertising.
3.4 Payment information
If you purchase a paid plan, payments are processed by Stripe.
We may receive and store:
- Stripe customer identifier
- Checkout session identifier
- Payment and invoice identifiers
- Payment amount and currency
- Applied discounts
- Payment status
- Subscription period information
We never see or store your card number, expiration date, or security code.
Payment details are entered directly into Stripe's payment interface and handled by Stripe.
4. Why we use your information and legal basis
We only process your information when we have a valid reason to do so.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating your account, providing your Solu page, and keeping you signed in | Performance of a contract |
| Sending verification codes and account-related emails | Performance of a contract |
| Allowing Google Sign-in | Performance of a contract |
| Processing payments and managing subscriptions | Performance of a contract |
| Keeping payment and accounting records where required | Legal obligation |
| Checking uploaded images and handling reports | Legitimate interests |
| Showing page owners aggregated statistics about their pages | Legitimate interests |
| Security, abuse prevention, rate limiting, and protecting accounts | Legitimate interests |
| Optional analytics and product improvement | Consent |
Where we rely on legitimate interests, we balance those interests with your privacy rights.
Where processing is based on consent, you can refuse or withdraw your consent at any time.
5. What is public and what is private
Most information shown publicly on Solu is information you choose to publish.
- Your page is public when you make it public. Anyone with the page link can see the information you choose to display, including your display name, links, images, stickers, and any mood check-ins you choose to show.
- Search engines may index public pages.
- Private pages are only accessible according to your privacy settings.
- Your email address is never displayed on your public page and is not visible to other users.
- If you use mood check-ins and choose to display them publicly, treat them as public content rather than private diary entries.
- The Explore section is optional. A page appears there only if you choose to submit it and it is approved according to Solu's process. You can request removal at any time.
6. Who may receive your information
We use a limited number of service providers to operate Solu.
Each provider only receives the information necessary to perform its service.
| Who | What they receive | Why |
|---|---|---|
| Stripe | Payment and related account information | Payments, subscriptions, and invoices |
| Information provided when you choose "Sign in with Google" | Authentication | |
| Email provider | Your email address and required email content | Sending verification codes and account emails |
| Hosting and database provider | Data required to run Solu | Hosting, storage, and database operations |
| PostHog | Analytics information when you have given consent | Product analytics and improving Solu |
Beyond these providers:
- We do not sell your data.
- We do not share your information with advertisers.
- We do not use third-party advertising trackers.
- We do not provide your data to data brokers.
We may disclose information if required by law or when necessary to protect our legal rights.
If Solu is ever transferred, sold, or acquired, your information may be transferred as part of that process. If this happens, we will provide appropriate notice.
7. Cookies
Solu uses cookies for different purposes.
7.1 Strictly necessary cookies
Some cookies are required for authentication, security, and basic functionality. These cookies are not used for advertising or optional analytics.
| Cookie | Purpose | Duration |
|---|---|---|
biolu_session | Keeps you signed in | 30 days |
biolu_signup | Temporarily stores information related to an unfinished signup | 15 minutes |
g_state, g_verifier, g_next | Temporary security values used during Google Sign-in | Until authentication completes |
solulu_next | Remembers where you were going after being asked to sign in | Short-lived |
solulu_offer | Keeps a discount or offer from a link | 30 days |
solulu_copy | Remembers the template selected during signup | Short-lived |
solulu_src | Remembers the source you arrived from, such as Instagram | 30 days |
These cookies are used for the functionality described above and are not used to build advertising profiles.
7.2 Analytics cookies
If you choose to allow analytics, PostHog may use cookies and similar browser technologies to understand how Solu is used and improve the product.
These technologies are optional and are not required to use the core Solu service.
Analytics is not activated until you give consent.
If you reject analytics, optional analytics is not activated.
7.3 Your analytics choice
When you first visit Solu, you may be asked whether you want to allow optional analytics.
You can accept or reject it.
Your choice is stored so that Solu does not ask you again on every visit.
You can change or withdraw your choice later through the available privacy settings.
Withdrawing analytics consent does not affect your ability to use the core Solu service.
8. How visits are counted
Solu provides page statistics to help page owners understand how their pages are performing.
This system is separate from optional PostHog product analytics.
We designed the page statistics system to provide useful information without creating a visitor tracking system.
8.1 Counts, not individual visits
We store aggregated numbers per page and per day, not individual visitor records.
We do not create visitor profiles for these page statistics, set tracking cookies on visitors' browsers for this purpose, or keep identifiers that allow us to follow the same person across visits.
A page owner can see general activity on their page, but cannot identify individual visitors.
8.2 Information is simplified before storage
To protect privacy, collected information is reduced before it is stored.
- Device type is simplified into categories such as Phone, Tablet, and Desktop.
- Country information may be stored only as a general country code provided by the network connection.
- We do not store visitor IP addresses together with page views.
- Referrer information is reduced to the website source rather than the full URL.
For example, we may store:
instagram.com
but not the specific post or page someone came from.
8.3 Link clicks
Link clicks inside a Solu page may be counted to help page owners understand which links are useful.
These counts are stored in an aggregated format, similar to page views.
This information is not intended to identify individual visitors.
9. Images and content moderation
Images uploaded to Solu may be automatically checked before being stored.
The purpose of this check is to prevent illegal or unsafe content from being hosted on the platform.
Image checking is performed through Solu's own infrastructure.
Images are not sent to external image-scanning services for this moderation process.
Uploaded images may also be processed by:
- converting formats,
- resizing,
- optimizing storage,
- checking access permissions.
Images are stored separately from public file paths and access is checked before files are delivered.
Automatic moderation systems are not perfect. They provide assistance in detecting potentially harmful content, and human review may be used when necessary.
Users can report content that violates Solu's rules or applicable laws.
10. Where your data is stored
Solu uses infrastructure and service providers selected to operate the platform securely.
Where possible, data processing is performed within regions that provide appropriate privacy protections.
Some service providers may process data in other countries.
When international data transfers occur, Solu uses appropriate safeguards designed to protect personal information and comply with applicable privacy laws.
11. How long we keep your information
We keep information only for as long as necessary for the purposes described in this policy.
| Data | Retention period |
|---|---|
| Your account and page content | Until you request removal or the account is closed |
| Active sessions | Up to 30 days, or until you sign out |
| Unused email verification requests | Until they expire |
| Uploaded images removed from your page | Deleted after they are no longer needed |
| Images uploaded but never used | Temporarily retained for processing, then removed |
| Aggregated page statistics | Kept while the page exists |
| Payment and invoice records | As long as required for financial and legal obligations |
| Optional analytics data | According to the analytics service's applicable retention settings |
Deleting your account deletes your account information, page content, uploaded files, sessions, and associated data.
Some limited information may remain if we are legally required to keep it, or if it has already been permanently anonymized.
12. How we protect your information
We take reasonable technical and organizational measures to protect your information.
These measures include:
- Email verification codes are temporary and expire after a limited time.
- Authentication sessions use secure, randomly generated tokens.
- Session information is stored securely.
- Authentication cookies use security protections such as
httpOnly,SameSite, andSecurewhere supported. - Google Sign-in uses Google's secure authentication flow and does not provide Solu with your Google password.
- Uploaded files are stored outside directly accessible public paths and access is checked before files are delivered.
- Connections to Solu are protected using HTTPS.
- Optional analytics is not activated until analytics consent has been given.
No online service can guarantee perfect security. If Solu experiences a security incident that affects your rights or personal information, we will take appropriate steps, including notifying affected users and relevant authorities where required by applicable law.
13. Your privacy rights
Depending on applicable privacy laws, you may have rights regarding your personal information, including:
- Access — Request a copy of the personal data we hold about you.
- Correction — Request correction of inaccurate or incomplete information.
- Deletion — Request deletion of your personal data where applicable.
- Restriction — Request that we limit certain processing activities.
- Portability — Request your data in a commonly used machine-readable format.
- Objection — Object to certain processing activities based on legitimate interests.
- Withdrawal of consent — Where processing is based on consent, you may withdraw your consent at any time.
Withdrawing analytics consent does not affect the legality of processing that occurred before you withdrew your consent.
To exercise these rights, contact:
We will respond within a reasonable timeframe and in accordance with applicable privacy laws.
If you believe your personal data has been handled improperly, you may also contact the relevant data protection authority in your country or region.
14. Children
Solu is not intended for children under the age of 13.
Accounts created by children under 13 are not permitted.
If we become aware that an account belongs to a child under 13, we will take steps to remove the account and associated information.
If you believe a child has created an account on Solu, please contact:
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
When changes are made, the "Last updated" date at the top of this page will be updated.
For significant changes that materially affect your privacy rights, we may provide additional notice through email or within the Solu service before the changes take effect.
We will not make important privacy changes silently.
16. YouTube
Solu uses YouTube API Services. If you connect your YouTube channel to a YouTube block, we ask Google for the youtube.readonly permission and use it once, at that moment, only to find out which channel belongs to you.
- What we keep: your channel's ID, name and handle.
- What we do not keep: your Google access token. We do not ask for offline access, so there is nothing to refresh and nothing that keeps working after you have connected.
- What the block shows: your channel's public information — its latest public videos, its video count and its subscriber count — read from YouTube with Solu's own API key, not with your account.
- Sharing: we do not share YouTube data with anyone else, sell it, or use it for advertising.
You can disconnect at any time, in the block's settings or in Settings → Connections, which deletes the channel details we kept. You can also remove Solu's access from your Google account at:
https://security.google.com/settings/security/permissions
When you connect YouTube, Google's Privacy Policy applies as well:
https://policies.google.com/privacy
Solu's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
17. Contact
If you have questions, requests, or concerns about this Privacy Policy or your personal information, contact us:
Email: hello@solulu.link
We welcome feedback if any part of this policy is unclear or inaccurate.
Something here unclear or wrong? Tell us and it gets fixed.