Last updated August 13, 2026
This page says what we collect, why, who else touches it, and how long we keep it. The short version: we hold as little about you as the product can work with, your domains are encrypted where we store them, and we never tell another member who you are before you have agreed to a citation.
Right Thing Agency LLC, doing business as Good Links Club, decides how the information described here is used. Write to us at support@goodlinks.club about anything on this page.
Account details. The account name, a username, a password (stored hashed, never in readable form), and an email address if you give us one. An email address is optional, and an account without one simply gets no email.
Your sites. The domains you add, and the pages on them. We crawl your site and store the text of eligible pages so we can match passages to citations. That means page titles, page URLs, article text, and the links already on the page.
Third party measurements. A Domain Rating for each domain, and traffic figures used once during review as a check on whether authority was earned or bought.
Activity. Citations suggested, accepted, and declined; links placed and their check results; your token history; billing status; and staff actions on your account, which are recorded so any change we make to your account can be traced back to whoever made it.
Technical logs. Ordinary server and security logs, including IP addresses, kept for a short period to keep the service running and to stop abuse.
We do not sell information about you, we do not run advertising trackers, and we do not build profiles for anybody else.
Domains and page URLs are not stored in readable form
The domains on your account and the URLs of your pages are encrypted before they are written to the database. Alongside each one we store a one-way fingerprint, which lets us look up an exact match without being able to read the value.
The practical effect is that a copy of the database does not hand anybody the list of participating sites. It also means there is no search by partial domain anywhere in the product, for us or for anybody else, because building one would mean decrypting the table to scan it.
This protects the membership list. It is not a claim that your domain is a secret in general: your own site is public, and a link you place on somebody else's site is public the moment it goes live.
Before a citation is accepted, an offer shows the subject, an authority band, the passage, the proposed anchor, and the token value. It never shows a domain, a URL, or a page title. That is enforced where the data is read, not in the page that displays it.
Accepting is what discloses. Once both sides have agreed to a citation, each can see the other, because you cannot place a link without knowing where it goes.
Other members never see your exact Domain Rating, only the band it falls in. You always see your own.
Our emails say what happened and link into the app. They do not name member domains and they do not contain page URLs, because a mailbox sits outside the protection described in clause 3, and unlike a password a domain cannot be changed after it leaks.
So a message reads "a link needs your attention" and you sign in to see which. This is checked automatically on every message we send.
These are the companies that handle information on our behalf. Each one is used for the job named and nothing else.
Cloudflare
Hosting, the database, file storage, and the search index. Everything the product runs on sits here.
Dodo Payments
Payments and subscriptions. Dodo Payments is the merchant of record and handles card details. We never see a card number.
Resend
Sending email: sign-in help, alerts about your links, and account notices.
Ahrefs
Domain Rating for the sites on your account, fetched monthly. We send a domain and get a number back.
Where the club is configured to draft citation wording with a language model, the passage and the draft are sent to that provider for the length of the request. No account details, no domains, and no email addresses go with them.
One cookie, for your sign-in session. It is set when you sign in and cleared when you sign out. A second small preference remembers whether you chose the light or the dark theme. There are no advertising cookies and no analytics cookies.
While your account is open: account details, your sites, and the content we indexed from them.
While a link is being watched: check results for the 6 months a placement is monitored, and for 90 days after a domain is removed for links it placed shortly before.
Longer, on purpose: your token history and the record of staff actions on your account. Both are append-only and are kept as long as the account exists, because a ledger you can edit is not a ledger.
Short: technical logs, and stored copies of crawled pages, which are kept only as evidence for a decision and are cleared on a rolling basis.
When you remove a domain, it leaves the network and its indexed content stops being used for matching. When you close your account, we delete or anonymise what we are not required to keep.
You can see and change your account details in the app, remove a domain at any time, turn off suggestions for older articles on any domain, and choose which notifications you get.
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to support@goodlinks.club and we will answer within 30 days. Some records we keep regardless, where the law or our own accounting requires it, and we will say which if that applies.
The service is for businesses and is not for anybody under 18. We do not knowingly collect information about children.
Our infrastructure is operated by Cloudflare and information may be processed in the United States and in other countries where its network runs.
If we change how we handle information we will update this page and the date at the top of it, and we will tell you about a material change before it takes effect. This policy forms part of the terms and conditions.
Questions about this page go to support@goodlinks.club, and we answer them.