The short version: we sell nothing about anybody
What we collect, why, and what we refuse to do with it. This covers both people who use peekin as creators and people who land on a page we host.
Last updated 4 October 2026
peekin.bio is operated by FBM Management LTD, in England and Wales. For data protection purposes we are the controller of the information described here, with one exception: an email address a visitor gives to a creator through a box on that creator's page belongs to the creator. For those addresses the creator is the controller and we are the processor, holding them on the creator's instructions and nothing else. You can reach us at support@peekin.bio.
We hold your email address, the name you choose to display, the contents of your page, the links you add and where they point, and your billing status. If you sign in with Google we receive your email address and whether Google has verified it. We do not receive or store your Google password, and we do not ask Google for anything else.
We hold your links' destinations because resolving them is the entire service. They are never written into any page we serve.
When you land on a creator's page we record that a visit happened, which page, roughly where in the world from your country code, which link you tapped if you tapped one, and a random identifier that expires thirty minutes after it is set.
We do not set advertising cookies, we do not run a Meta pixel, and there are no third-party trackers on any page we serve. A creator page asks your browser to contact nobody but us and Cloudflare, which hosts us and runs the human check for the 18+ step (that check loads on the page so that the step needs no visible box). Not an analytics tag, not a pixel, not a chat widget, and since 3 September 2026 not a font either: the typefaces a creator can pick are served from our own address rather than from Google, so nobody else sees your IP. That is not a preference, it is the product: a page with a tracker on it is a page reporting your visit to somebody else.
We do not know your name, we do not attempt to identify you, and we do not build a profile of you across sites.
Unless you type it in. A creator can put a box on their page asking for your email address. If you fill it in and send it, we store that address, and a two-letter country code taken from your connection, against that one creator's page. Nothing else is stored with it: not your IP address, not your browser, not which links you tapped, and it is not joined to anything else we hold. The address is the creator's, not ours: for that address the creator is the data controller and we are their processor. We never email you from it, we never use it for anything of our own, and we never give or sell it to anybody else. The creator can download their list and can delete it. If you want to be taken off one, ask the creator whose page you gave it to, or write to us and we will remove it.
One cookie, set only when a creator signs in, holding a signed session token so we know who is asking. It is marked HttpOnly, Secure and SameSite=Lax, and it is not used for analytics or advertising.
Visitor pages use a value stored in your browser tab for the length of that tab, so a single visit is not counted several times. It is discarded when the tab closes and it never leaves your browser except as an anonymous count.
Adult links sit behind a human check provided by Cloudflare Turnstile. It confirms you are a person. It does not identify you, we receive no personal data from it, and no record of who passed it is kept beyond an anonymous count.
If you use the profile picture tool, the image is sent to Cloudflare's AI service to be looked at and is then discarded. We do not store the image, we do not keep the result against your account, and it is not used to train anything.
Only companies we need to run the service, and only for that purpose:
We do not sell, rent or share your data with anyone else, and we do not share it for advertising. Ever, and there is no plan under which that changes.
Account and page data for as long as your account exists, and then for 30 days after you close it in case you come back. Visit records for 24 months, because a creator comparing this year with last year is the only reason to keep them. Billing records for as long as tax law requires, which is currently six years.
You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email support@peekin.bio and we will act within 30 days. You do not need to give a reason.
Creators can export their own visit data as a spreadsheet from the dashboard at any time without asking us.
If you think we have handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
On Cloudflare's network, which is global. Some processing therefore happens outside the UK and the EEA, covered by the standard contractual clauses in Cloudflare's own data processing agreement.
If we change this in a way that affects you, we will email you before it takes effect rather than quietly reposting the page with a new date on it.
Write to support@peekin.bio. A person reads it. Anything about money, an invoice or a refund goes to billing@peekin.bio.