Privacy Policy
Effective date: August 13, 2026
This Privacy Notice explains how Premlead collects, uses and protects personal data in connection with creators.Best at creators.Best, its Creator subdomains ({handle}.creators.Best), and the dashboard at https://app.creators.best (together, the "Service").
Jump to a section: a. What does creators.Best do · b. Who this applies to · c. Data we collect · d. Purposes & legal bases · e. Who we share data with · f. International transfers · g. Retention · h. Security · i. Your rights · j. Children · k. Third-party links · l. Changes · m. Contact
a. What does creators.Best do?
creators.Best is a link-in-bio platform: Creators publish a public page listing links to their own content and social profiles; visitors browse that page and click through to those links.
b. Who this applies to
This Notice applies to:
- Visitors who view a Creator's public page and click links.
- Creators who register a creators.Best account, publish a page, and optionally subscribe to Pro.
creators.Best is operated independently from other products of Premlead; an account on creators.Best is separate from accounts on those other products, even where the same underlying email address is used.
Premlead Société par actions simplifiée (SAS), share capital €1,000 RCS Créteil 799 482 120 · SIRET 799 482 120 00018 · VAT FR25799482120 · NAF 7022Z 295 Rue du Professeur Paul Milliez, 94500 Champigny-sur-Marne, France
c. Data we collect
Account & profile (Creators)
| Data | Source | Purpose |
|---|---|---|
| Name | Registration | Account |
| Login email | Registration / Google sign-in | Authentication, service notifications |
| Email verification status | System | Account security |
| Profile picture | Optional upload | Public profile |
| Role | System | Access control |
| Handle | Onboarding | Your public page address |
| Display name, bio | Profile settings | Public page |
| Avatar / background images | Upload (stored via CDN) | Public page |
| Theme / colour preferences | Settings | Display |
| Social links | Profile settings | Public page |
| Plan (Free / Pro) | Billing | Feature access |
| Account status | Moderation (if applicable) | Trust & safety |
Supported social platforms: website, X, Instagram, TikTok, YouTube, Facebook, LinkedIn, Pinterest, GitHub.
Links
Link title, destination URL, image, order and active status — published by the Creator to build their public page. The Creator is responsible for the destination and legality of each link (see Terms, Section 5).
Click analytics (visitors)
When a visitor clicks a link on a Creator's page, before redirecting we record:
- A hashed version of the visitor's IP address (SHA-256; we do not store the IP address itself).
- Browser/user-agent string (truncated).
- Referrer URL (truncated).
- Timestamp.
This data is shown to the Creator as "basic click analytics." We do not use a cookie or client-side tracker for this — it is recorded server-side at the time of the redirect.
Sessions & security
When you log in, we create a session record containing a session token, expiry, IP address and user-agent, used to keep you signed in and to protect your account. See our Cookie Notice for the cookies this involves.
Payment (Pro subscribers)
We (via Stripe) store your Stripe customer and subscription identifiers and subscription status to manage your Pro plan. We do not store your card details on our own servers — these are collected and processed directly by Stripe.
Media
Avatars, background images and related assets you upload are stored with our content-delivery provider.
What we do not collect
We do not currently operate a dedicated newsletter for creators.Best, do not offer messaging between users, and do not collect date of birth or postal address from Creators (beyond what Stripe collects for billing). We do not use device fingerprinting, and we do not run third-party analytics, advertising pixels, or marketing trackers on creators.Best.
d. Purposes & legal bases
| Processing | Legal basis |
|---|---|
| Creating and operating your account, page and links | Performance of a contract |
| Authentication, fraud prevention, account security | Legitimate interest / contract |
| Click analytics shown to the Creator | Legitimate interest (aggregate stats for the page owner) and/or contract with the Creator |
| Pro subscription & billing | Contract, and legal/accounting obligations |
| Google sign-in | Contract / pre-contractual steps; Google is the data source for the information it shares with us |
| Any future non-essential cookies | Consent, if and when introduced |
e. Who we share data with
| Recipient | Role | Typical data |
|---|---|---|
| Hosting provider (application & database hosting) | Processor | All data necessary to run the Service |
| Stripe | Processor (payments) | Billing identity, payment details, subscription status |
| Processor (if you use Google sign-in) | Name, email, avatar, per OAuth scopes granted | |
| CDN / media storage provider | Processor | Uploaded avatar, background and brand assets |
We do not sell personal data.
f. International transfers
Some of the providers listed above may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision.
g. Retention
[Proposed — to validate before publication]
| Category | Proposed retention |
|---|---|
| Account, profile, links | For the life of the account, plus a limited period after deletion for legal/operational purposes |
| Sessions | Aligned with session expiry (7 days) plus routine purge |
| Click analytics | 12–24 months, then deleted or aggregated |
| Billing records | As required by French accounting/tax obligations (commonly up to 10 years for supporting documents) |
| Infrastructure/hosting logs | Per our hosting provider's retention settings |
| Uploaded media | While your account is active; deleted on account closure |
h. Security
We apply reasonable technical and organisational measures to protect your data, including hashing IP addresses for click analytics and using secure, httpOnly session cookies. No system is completely secure; if you believe your account has been compromised, contact us immediately.
i. Your rights
Subject to applicable law (including the GDPR if you are in the EU/EEA), you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Request restriction of processing
- Request portability of your data
- Object to processing based on legitimate interest
- Withdraw consent (where processing is based on consent)
- Lodge a complaint with a supervisory authority — in France, the CNIL
We do not currently offer a fully self-service export/delete tool; to exercise any of these rights, contact us at https://creators.best/contact and we will process your request manually within the timeframes required by law.
j. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from individuals below this age. If you believe a child has provided us data, contact us so we can take appropriate action.
k. Third-party links
Creator pages link to third-party websites and social profiles we do not control. This Notice does not cover the privacy practices of those destinations; please review their own policies.
l. Changes
We may update this Notice from time to time. Material changes will be notified via the Service and/or to your account email. The "Effective date" above reflects the latest version; a prior version is available on request.
m. Contact
For privacy questions or to exercise your rights, contact us via https://creators.best/contact.