Privacy Policy & Legal Terms: LinkShield
LinkShield ("the Application", "we", "us", or "our") is dedicated to protecting user privacy while providing link verification and security assessment tools. Our core operating principle is Privacy by Design, operating under a strict zero-permission model.
This document outlines how data is handled, processed, and protected when using LinkShield, as well as the terms governing the use of the Application.
1. Zero-Permission & Local Privacy Model
LinkShield is designed to minimize data exposure. The Application does not request or use invasive system permissions:
- No Access to SMS or Messages: We do not read, access, or store your SMS inbox or messaging apps.
- No Accessibility Services: We do not track screen activity, monitor inputs, or collect keystrokes.
- No System Overlays: We do not draw over other applications without user interaction.
- No Access to Personal Files or Contacts: We do not access contacts, location data, camera, photos, or device media.
2. URL Processing & Security Verification
To assess whether a link presents potential cyber threats, phishing risks, or malicious intent, LinkShield performs automated URL verification:
- Local Automated Analysis: Basic URL formatting, structural checks, and risk detection are performed locally on your device.
- Encrypted Security Lookups: To verify web safety against updated threat registries, the Application communicates directly with industry-standard security services via encrypted protocols (e.g., DNS-over-HTTPS and Google Web Risk). To perform a check, the web address of the link you chose to verify (with common tracking parameters removed) is sent to these services, and, like any internet request, your device's IP address is visible to them. No name, account, advertising ID, or other personal identifier is sent, and we do not receive the results of these lookups on any server of ours.
If you choose to turn on the optional, off-by-default advanced decoding setting and agree to its notice, the names of the websites that the page being checked connects to are also sent to the secure DNS service (Quad9) together with your device's IP address, and the device's built-in browser component may send short hash prefixes of the addresses it loads to Google (Google Safe Browsing). The same no-identifier and no-server-of-ours terms apply. - Built-in Threat List (On-Device): The Application includes lists of known phishing and malware-distribution websites (derived from the open-source Phishing.Database project and from a snapshot of the abuse.ch URLhaus database). Links are matched against these lists entirely on your device; no link is sent anywhere for this check.
- No Centralized Browsing Logs: We do not operate proxy servers to route your traffic, nor do we build profiles or retain central logs of your browsing history or visited URLs.
3. Data Storage & User Control
- On-Device Storage: Any scan records, safety scores, or preferences created during use are stored strictly on your local physical device within the Application's isolated storage.
- Sensitive Settings: The parental-lock PIN (kept only as a salted, one-way hash) and the optional VirusTotal API key that you enter are stored in encrypted storage protected by Android on your device. If your device cannot provide such protected storage, the Application does not save these items in readable form: it tells you that they were not saved, and the parental lock or the key is simply not set. Nothing is sent to us in either case.
- User Control: You may clear your local scan history at any time through the Application settings.
- Secure Export: If you choose to export your local data, all actions are executed using standard Android system sharing mechanisms without granting external storage permissions to the Application.
4. Third-Party Services & Payment Processing
- No Third-Party Advertising or Tracking: LinkShield does not integrate third-party advertising networks, marketing trackers, or telemetry analytics SDKs.
- Open-Source Data: The built-in threat lists are derived from Phishing.Database (MIT License) and from abuse.ch URLhaus. The notices are available in the Application under Settings > Open-source licenses.
- In-App Purchases: All financial transactions, subscriptions, and billing are processed exclusively and securely by Google Play. We do not receive, process, or store credit card or financial account information.
5. Disclaimer of Warranties & Limitation of Liability
PLEASE READ THIS SECTION CAREFULLY.
- "AS IS" and "AS AVAILABLE" Basis: LinkShield is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express, implied, statutory, or otherwise, including but not limited to implied warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement.
- No Guarantee of 100% Security Detection: Cybersecurity threats constantly evolve. While LinkShield employs automated risk assessment methods, we do not guarantee or warrant that the Application will identify all malicious URLs, phishing attempts, malware, or software vulnerabilities, or that false positives/negatives will not occur.
- Limitation of Liability: To the maximum extent permitted by applicable law, in no event shall the developers, owners, or affiliates of LinkShield be liable for any direct, indirect, incidental, special, consequential, or punitive damages (including, without limitation, loss of data, security breaches, financial losses, device damage, or interruption of service) arising out of or in connection with your use of, or inability to use, the Application or reliance on any security score or assessment provided by the Application.
- User Responsibility: You acknowledge and agree that your decision to open, click, or interact with any URL or web content is at your own sole risk and discretion.
6. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or Application functionality. The updated version will be indicated by the "Last Updated" date at the top of this document.
7. Contact Us
If you have any questions, concerns, or legal inquiries regarding this Privacy Policy or Application practices, please contact us at:
Email: privacy@beforeopen.si