The short version
- We collect what's needed to run your account and page: your email, a scrambled (hashed) password, and what you put on your profile.
- For security we keep the IP address and device of your last 15 logins and your active sessions.
- Visitor stats (country, device, which site they came from) are counted as totals. We don't build profiles of visitors, and IPs used for view counting are stored only in hashed form.
- No ads, no tracking pixels, and we never sell your data.
- You can download your data or delete your account at any time from Settings.
1Who we are
repent.info ("we", "us") is a free link-in-bio and file hosting site. We're the data controller for the personal data described here. This policy applies to everyone who uses repent.info: people with accounts and people who just visit a page. It's written to follow UK data protection law (the UK GDPR and the Data Protection Act 2018).
2What we collect from account holders
| Data | Details |
|---|---|
| Account details | Username, email address, and your password. The password is stored only as a salted scrypt hash, so we can't read it. |
| Profile content | Display name, bio, tags, links, colours and settings, profile picture, banner, background, music, cursor, widgets (for example a GitHub or Roblox username, or Discord ID), and templates you publish. |
| Uploads | Files you upload to the image host, with their name, type, size and upload date. Images are checked for nudity by an AI model running on our own server (nothing is sent to anyone else), and hidden photo metadata (such as GPS location, camera model and time taken) and the location recorded in phone videos are removed before the file is stored. We don't keep the original. |
| Activity | Likes and dislikes you give, comments you post, reports you send, and when you agreed to these policies. |
| Security | The IP address, browser and time of your last 15 logins and of each active session. If you turn on two-factor authentication: the secret key and hashed backup codes. |
| Invites | Who invited you, if you signed up with an invite link, plus a hashed (not readable) identifier of the network you signed up from. This is used to stop people faking invites. |
| Your page's stats | Totals of views and link clicks per day, and counts of visitors' countries, device types and referring websites. Only you and staff can see these. |
3What we collect from visitors
When someone views a profile, we count the view in a way that blocks bots and repeat counting:
- A random visitor ID cookie (
vid), so one visitor counts once per day. - A hashed version of the visitor's IP address and network, kept only for the current day, then deleted.
- Their approximate country (worked out from their time zone or browser language, or from our hosting provider's country header if there is one), their device type (desktop, mobile or tablet), and the name of the website they came from (for example "discord.com", never the full address).
These are added to the page owner's totals. We don't store a list of who viewed which page. Link clicks are counted the same way. Like all websites, our server briefly handles IP addresses to send pages and to block abuse (rate limits). These are kept in memory and not stored long-term.
4Why we use it (and our legal basis)
| Purpose | Legal basis |
|---|---|
| Running your account and showing your page | Contract: it's needed to provide the service you signed up for. |
| Keeping accounts secure, stopping spam, bots, fake views and abuse | Legitimate interests: keeping repent.info safe and fair for everyone. |
| View and click stats for page owners | Legitimate interests: page owners want to know how their page is doing. We only keep totals. |
| Moderation: handling reports, bans and appeals | Legitimate interests, and legal obligations where content is illegal. |
| Important emails about your account or these policies | Contract and legitimate interests. We don't send marketing emails. |
| Responding to legal requests | Legal obligation. |
5What's public
Your profile page is public: your username, display name, picture, bio, tags, links, badges, widgets, view count, like and dislike counts, and comments. Anyone can see them, and search engines and link-preview bots (for example Discord or X) may show them. Files shared by link can be seen by anyone with the link. Templates you publish appear in the public gallery.
Your email, password, IP addresses, login history and detailed stats are never public.
7Third-party services
We never sell or rent personal data. Some features load content from other services. When they do, your browser connects to that service, which can see your IP address:
- Google Fonts: fonts used on the site and on profiles.
- Simple Icons CDN: social media icons.
- Discord: live Discord status and Spotify "now playing" come from the repent.info bot, for members of our Discord server whose ID is on a profile. If the bot is offline, pages fall back to Lanyard (api.lanyard.rest).
- Spotify: the embedded player, only on pages with a Spotify widget. Spotify may set its own cookies.
- Kick and TikTok: the embedded players, only on pages with a Kick or TikTok widget. They may set their own cookies.
- Discord, GitHub, Roblox, Steam, Spotify, Telegram and Bluesky image servers: avatars and album art shown in widgets.
For GitHub, Roblox, Steam, Telegram, Bluesky and Lichess widgets, our server looks up the public username you entered. It doesn't send anything about the visitor.
We may share data if the law requires it, to protect people from serious harm, or to deal with illegal content, for example reporting child sexual abuse material to the authorities. Requests from police and other authorities have to follow the process in section 9 of our Terms, and we'll usually tell you about a request for your data unless the law stops us. If repent.info is ever taken over by someone else, this data would move to them under this same policy, and we'd tell you first.
8How long we keep it
- Your account and content: until you delete them. Deleting your account removes your page, links, uploads, templates, likes, dislikes and comments straight away.
- Login history: your last 15 logins. Older entries are replaced automatically.
- Sessions: up to 30 days, or until you log out or revoke them.
- Hashed visitor IPs for view and click counting: deleted at the end of each day.
- Page stats: kept as totals with your account and deleted with it.
- Reports and staff action logs: kept while needed for safety and moderation. Staff logs keep the last 5,000 actions.
9Keeping it safe
Passwords are hashed with scrypt, login cookies are HTTP-only, and we offer two-factor authentication. We also use strict security headers, rate limits and lockouts against password guessing, and file-type checks on uploads. No system is perfect, though. If a data breach puts you at risk, we'll tell you and, where required, the Information Commissioner's Office (ICO).
10Your rights
Under UK data protection law, you can:
- Get a copy of your data. Use "Export my data" in Settings, or ask us.
- Correct it. Most of it you can edit yourself in the dashboard.
- Delete it. Use "Delete account" in Settings, or ask us.
- Object to or restrict how we use it, where we rely on legitimate interests.
- Move it to another service. The export is a standard JSON file.
Email us to use any of these rights. We'll reply within one month. If you're not happy with how we handle your data, you can complain to the Information Commissioner's Office.
11Children
You must be 13 or older to make an account. We don't knowingly collect data from children under 13. If you think a child under 13 has an account, tell us and we'll delete it.
12Changes
If we change this policy in an important way, we'll show a notice on the site before the change takes effect. The date at the top shows when it was last updated.
13Contact
For privacy questions or requests, email support@repent.info.
See also our Terms of Service.