Privacy Policy

Last updated: 2026-11-12 / Established by XTV LLC

XTV LLC ("we" or "the Company") provides the scam link checker application "NoLinkTrap" ("the Service") with a design philosophy of minimal data collection and the highest priority on user privacy. This Privacy Policy ("this Policy") describes how user information is handled in connection with the Service.

Article 1 — Information We Do Not Collect

The Service does not collect any of the following:

• Email addresses, passwords, or any account credentials (there is no account)
• Name, age, gender, or date of birth
• Home address or phone number
• Your precise (GPS) location — the Service does not request the location permission at all
• Your contacts, photos, files, messages, or browsing history
• Camera, microphone, or other audio/visual data
• The links you open, the websites they lead to, or the results of any check — these are never sent to us (see Article 4 for the limited, narrow exceptions needed to run certain checks)

Article 2 — Data Stored Only on Your Device

1. The following data is stored only in your device's local storage and is never transmitted to us or to anyone else:
   • Your history of checked links (Premium feature; up to the last 100 entries: the website address, the verdict, and the time of the check)
   • Your "trusted sites" list (Premium feature)
   • The browser app you have chosen to open links with
   • Your settings (such as the app language)
   • The counter used for the daily free check
2. Android Auto Backup is disabled for the Service. This data is not backed up to Google and is not transferred to a new device. Uninstalling the app permanently deletes all of it.
3. Because this data never leaves your device, we have no access to it and cannot view, recover, or restore it on your behalf.

Article 3 — Usage Measurement and the Support ID

1. The Service uses Google Analytics for Firebase to understand how the app is used. This sends to Firebase an anonymous app-instance identifier, the app language you have selected, and the Support ID described below as a user property. It also records the following in-app events, and nothing else:
   • Introduction steps: opening the introduction, starting the introduction, setting or skipping the default-browser step, choosing or skipping a browser, and completing the tips
   • A link arrived — recording only how it arrived (tap, share, or paste), never the link itself
   • A check was run — recording only the overall verdict category (no known problems / caution / fake suspected) and the type of rule that fired (for example, "lookalike," "shared host," or "shape"), never the link, the website address, the brand, or your history
   • What you chose on the result screen — open, open without checking, don't open, open the real site, open anyway, or don't check this site again — together with the verdict category, never the link
   • Seeing the notice that the day's free check has been used, and which tab you opened (Home, History, or Settings)
   • Purchase-screen events: view, checkout, done, cancel, restore, error, and closing the screen without purchasing; and tapping "Restore purchase" in Settings
   • Whether Google Play's in-app review request was made, was unavailable, or finished (and roughly how long it stayed open) — never your rating or review
   The Service never sends the link you checked, the website address, the brand it resembles, or your history to Firebase or to anyone else.
2. Google Analytics for Firebase derives an approximate location (such as country or region) from your device's IP address. We use it only in aggregate, for example to see in which countries the Service is used. It is not your precise location.
3. The Service collects the Android advertising ID and uses it to measure advertising effectiveness (for example, which ad led to an install or a purchase, measured via Google Ads). You can reset or delete the advertising ID at any time in your device's Android settings.
4. The Service generates a random Support ID on your device (for example NL-7KQ4-M9XB) and shows it in the Settings screen. It is not linked to your name, email address, or phone number. It is attached to the usage-measurement data above and to your RevenueCat subscription record, so that we can find your records when you contact us with that ID.
5. In addition, the Service sends the following to our own measurement server (operated on Supabase, Sydney region): the Support ID and an anonymous internal ID issued by that server; your device's country (from the SIM or mobile network, not your location) and language; the app version; your current plan; the Google Play install referrer (which may include an advertising click identifier); whether NoLinkTrap is currently set as your default browser app; a record of screens you use in the app (the same kind of events as above); daily counts of fake-checks run, by how they were started (by pressing the check button, or automatically for Premium) and by result level (no known problems, caution, or fake suspected); and purchase status received from RevenueCat (plan, start, renewal, cancellation). It never sends the links you open, website addresses or names, the companies a link pretends to be, the details of any check result, your location, or your IP address as data. We use this only to improve the Service and to answer support requests.
6. Usage-measurement data described in this Article is retained according to the data-retention setting of Google Analytics, for up to 14 months, and is then deleted automatically.

Article 4 — How the Link Checks Work

1. With your permission, NoLinkTrap is set as your device's default browser, so that links you tap, share, or paste come to it first. After you decide what to do, the Service hands the link to the browser app you have chosen, and that browser's own privacy policy then applies to what happens next.
2. Checks run on your device. The Service compares the link against a list of official websites of well-known companies that is built into the app, and against built-in rules (such as look-alike characters, services where anyone can publish a page, and unusual address shapes). Links wrapped by services such as Gmail's link-wrapping are unwrapped on your device before the check.
3. For well-known link-shortening services (for example bit.ly, tinyurl.com, or t.co), the Service contacts only that shortening service to learn where the short link points, without opening the destination page. This means the short link itself is sent to that shortening service. This happens for both free and Premium users. The shortening service receives no information about you beyond what any ordinary web request carries, and is not a sub-processor as described in Article 8.
4. Premium only: to show how recently a website was registered, the Service sends only the website's domain name (for example, example.com — never the full link) to the public RDAP lookup service at rdap.org, which forwards the query to the registry responsible for that domain. rdap.org receives no information about you beyond what any ordinary web request carries, and is not a sub-processor.
5. The Service reads your clipboard only when you tap "Paste and check," and only to read the link you want checked.

Article 5 — Permissions

1. The Service requests the following:
   • Default browser: the Service asks Android to make it your default browser. You confirm this in an Android system dialog, and you can change it at any time in your device's Settings → Apps → Default apps → Browser app. The Service looks up which browser apps are installed on your device only so that you can choose one to open links with.
2. The Service does not request location, notifications, contacts, camera, microphone, or storage permissions.
3. The Service also uses permissions that Android grants automatically, such as internet access, viewing network state, Google Play Billing, and the advertising ID (AD_ID).

Article 6 — Premium Subscription and RevenueCat

1. The Service is free to use for one fake-link check per day, run when you tap "Check if it's fake."
2. NoLinkTrap Premium is a monthly auto-renewing subscription, purchased through the Google Play Billing system provided by Google LLC, that checks every link automatically and adds the online registration-date check described in Article 4, link history, and the trusted-sites list.
3. Subscription status is managed on our behalf by RevenueCat, Inc. (headquartered in the United States). RevenueCat generates an anonymous app user ID on your device — it is not linked to your name, email address, or any other personal information. When you purchase or renew Premium, your Google Play purchase token, the product ID, and your Support ID are sent to RevenueCat so that it can validate the purchase and track renewals, cancellations, and expiry.
4. Card numbers, expiry dates, and other payment details are handled exclusively by Google Play. Neither we nor RevenueCat ever see or store them.
5. RevenueCat retains your subscription records (the purchase token, the anonymous app user ID, the Support ID, the product ID, and subscription status history) until you request their deletion via the contact details in Article 14. Deleting these records does not cancel your Google Play subscription, which must be canceled separately in Google Play.
6. You may restore a previous purchase at any time using "Restore purchase" on the purchase screen, provided you are signed in with the same Google account used for the original purchase.

Article 7 — Sharing with Google for Advertising Measurement

The usage events, approximate location, advertising ID, and purchase events described in Articles 3 and 6 are processed by Google LLC through Google Analytics for Firebase and may be used by Google to measure and improve the performance of advertising for the Service (Google Ads). Apart from this, we do not sell or share user data with third parties.

Article 8 — Sub-processors

We entrust the processing described above to the following service providers solely for the purpose of delivering the Service:

These sub-processors are contractually obligated to handle data appropriately in accordance with our agreements with them. The link-shortening services and the rdap.org lookup service contacted for the checks in Article 4 receive no information about you beyond what any ordinary web request carries, and are not sub-processors. We do not use any other third-party service inside the Service.

Article 9 — International Data Transfers

1. Subscription-related data described in Article 6 is held on servers operated by Google Play and RevenueCat (United States). Usage-measurement data described in Article 3 is held on servers operated by Firebase (United States) and on our measurement server hosted by Supabase (Australia, Sydney region).
2. These sub-processors implement appropriate data protection measures, including technical and organizational safeguards such as encryption.
3. Pursuant to Article 28 of the Act on the Protection of Personal Information (Japan), please contact us separately for information regarding the handling of personal information by the above transfer recipients.

Article 10 — Data Retention and Deletion

1. All data described in Article 2 lives only on your device. Uninstalling the app deletes it immediately and permanently; we have no copy to retain or delete on our side.
2. Your subscription records held by RevenueCat are retained as described in Article 6, until you request their deletion.
3. Records of Premium purchases and billing themselves are separately retained by Google Play (Google LLC) and are handled in accordance with Google Play's terms.
4. Usage-measurement data described in Article 3 is retained according to the data-retention setting of Google Analytics (up to 14 months) and is then deleted automatically. On our measurement server, the record of a device that has not contacted the server for one year is deleted automatically, and screen records are deleted after about 13 months (400 days).

Article 11 — Your Rights

1. Right of access: You can view your link-check history, your trusted sites list, and your settings at any time within the app itself.
2. Right to deletion: Uninstalling the app immediately and permanently deletes all data described in Article 2.
3. Deletion of records held by our sub-processors: Send your Support ID (shown in Settings) to the contact details in Article 14. We will delete your subscription records held by RevenueCat and the records on our measurement server, and request deletion of the usage-measurement data linked to that Support ID. Doing so does not cancel your Google Play subscription.
4. Records held by Google Play: For requests to delete purchase or billing records held by Google Play, please contact Google directly.
5. Advertising ID: You can reset or delete the advertising ID at any time in your device's Android settings.

Article 12 — Our Website

Our website (no-dial.com) uses Google Analytics, an analytics tool provided by Google LLC, to understand and improve how the site is used. Google Analytics uses cookies and similar technologies to collect browsing information (pages viewed, time on page, approximate region, browser type, etc.); this information does not include personally identifying details such as your name or address. The collected information is handled in accordance with Google's Privacy Policy. You can disable this data collection at any time using the Google Analytics Opt-out Browser Add-on. The Service does not show any advertising inside the app.

Article 13 — Changes to This Policy

1. We may update this Privacy Policy from time to time.
2. When changes are made, we will notify users of the content and effective date through in-app notifications or this page.
3. For material changes (such as the addition of new categories of information collected or new third-party recipients), we will obtain renewed consent from users.

Article 14 — Contact