Privacy Policy

ERAGO is operated by PT Karya Era Kreatif. This policy describes how we handle account, billing, and link data when you use the service on erago.site.

What we collect

When you create an account we store your name, email, authentication provider (Google, X, or email), optional 2FA secret, short links, QR styles, bio page content, and custom domains you add. Click analytics store time, referrer, device, and coarse country when a short link is opened.

For account security, we also log sign-ins, failed sign-in attempts (including the email entered) and security changes such as 2FA or password changes, with the time, IP address and browser. We use this only to protect your account and spot suspicious activity. You can see your recent activity in Settings.

How we use it

Data is used to run the product: sign-in, redirects, analytics, billing through Polar, and account security with an authenticator app. We do not sell personal data.

Events

When you register for an event, we share your name and email with that event's organizer so they can manage attendance and check-in, and, if you choose the optional $0.50 email add-on, we use them to send your QR ticket, registration details and calendar invite. The add-on payment is processed by Polar. Organizers handle any ticket payment you make to them under their own terms.

Processors

Hosting and database run on our production providers. Payments are processed by Polar. Sign-in with Google or X is federated through the Grok auth broker. Any account may turn on two-factor codes from an authenticator app such as Google Authenticator or Proton Authenticator.

Retention

We keep account data while the account is open. If you move from Pro to Free, nothing is deleted: additional custom domains are paused and kept. You can delete links at any time. Contact us at taksu@erago.site to request account deletion.

Sign-in and security logs are kept for 180 days, then deleted. Deleting your account deletes them right away.

Cookies

A session cookie keeps you signed in. A language cookie (erago_lang) remembers the language you picked. A first-touch cookie (erago_ft) lasts 30 days and records how you first arrived, so we can see which introduction led to a signup. These cookies run the product. We do not use a cookie-consent banner to turn them off.

Mixpanel records how the product is used and stores its identifier in local storage on your browser, not in a cookie. Ahrefs Web Analytics counts visits and does not set a cookie. We do not sell this data. You can block or delete cookies and local storage in your browser. Sign-in needs the session cookie.

GDPR

If the GDPR applies to you, email taksu@erago.site to access, correct, or delete your personal data, or to limit how we use it. We reply within 30 days. Account data is processed to provide the service you asked for. Security logs and product measurement are processed because we have a legitimate interest in keeping the service safe and seeing how it is used.

CCPA

If the CCPA applies to you, email taksu@erago.site to ask what personal information we hold or to ask us to delete it. We do not sell personal information, and we do not share it for cross-context advertising.

Contact

PT Karya Era Kreatif — privacy questions about ERAGO can be sent to taksu@erago.site.