Last updated August 1, 2026
When you create an account: your email address and a securely hashed password (we never store your actual password — it's processed with PBKDF2 hashing before it ever touches our database).
When you build a link: the destination URL and campaign details (source, medium, campaign, term, content) you enter, and the resulting tagged URL.
When someone clicks one of your short links: the time of the click, the referring page (if any), the visitor's country (derived server-side from their connection — we don't store their IP address), and a general device type (mobile, tablet, or desktop, parsed from the browser's user-agent string). We don't track individual visitors across sites or build profiles of them.
If you subscribe to a paid plan: your subscription status and plan name. Your card details are entered directly into Stripe's own checkout page and never pass through our servers — we only receive confirmation of your subscription and an ID number for it.
We set one essential cookie (manifest_session) to keep you signed in — the site doesn't work without it. Google Analytics sets its own cookies for the usage tracking described above.
We don't sell your data to anyone. We don't store the IP addresses of people who click your links. We don't see or store your payment card details — Stripe handles that entirely.
We keep your account, links, and click data for as long as your account is active. If you'd like your account and its data deleted, email us and we'll remove it, aside from records Stripe or we are legally required to retain (e.g., billing records for tax purposes).
Passwords are hashed, not stored in plain text. All traffic to Manifest is encrypted (HTTPS). No system is perfectly secure, but we take reasonable steps to protect your data.
Manifest isn't directed at children, and we don't knowingly collect data from anyone under 16.
If we make material changes to this policy, we'll update the date at the top of this page.
Questions about your data, or want it deleted? Email us at vjthas@gmail.com.