Privacy Policy

Last updated: October 11, 2026

Just the Links is a native Mac, iPhone, and iPad app. I do not run a Just the Links server that stores your social-network passwords or feed data. This page describes what the app stores and who else may see it.

What the app stores on your devices

• Mastodon, Bluesky, Tumblr, and Micro.blog sign-in tokens, in iCloud Keychain so they can sync between your Apple devices.
• Account handles, source choices, feed filters, and Read Later bookmarks, in iCloud (CloudKit) when you are signed into iCloud.
• A local cache of recent link posts, on that device only.

If iCloud is off or unavailable, that data stays on the device.

What I do not collect

I do not operate an analytics, advertising, or crash-reporting service for this app. I do not receive your Mastodon, Bluesky, Tumblr, or Micro.blog passwords. I do not see your payment card details.

Apple

Purchases and the subscription are processed by Apple. Apple's privacy policy applies to App Store billing and to iCloud if you use it. I receive only the subscription status StoreKit provides (for example, whether your entitlement is active).

Apple Intelligence

Ask About Article uses the on-device Apple Intelligence model built into the system. The app gives that model a shortened plain-text copy of the open article, then your questions. Apple documents this model as running on the device: the text going in, and the reply coming back, stay there. The app does not use Apple's Private Cloud Compute model, and it does not send the article or your questions to me or to any other AI service.

The conversation lives only while that sheet is open. Closing it drops the summary and the questions. If Apple Intelligence is turned off, or the device does not have the model, the feature is not available.

Mastodon, Bluesky, Tumblr, and Micro.blog

When you add an account, the app talks directly to that service (a Mastodon or compatible instance, a Bluesky PDS, Tumblr, or Micro.blog) to sign in, read the timelines you enable, and (if you choose) like or repost. Those operators process that traffic under their own policies.

For Mastodon and Bluesky, the app requests read access to statuses, lists, and account profile data, plus permission to repost. For Tumblr, it requests basic read access, write access so it can like and reblog, and offline access so you stay signed in. For Micro.blog, it requests read and write access, which covers your timelines, likes, and reposts.

This website

justthelinks.app hosts this policy, the terms, a public OAuth client-metadata file that Bluesky requires for sign-in, and a redirect page Tumblr requires for sign-in. That page passes Tumblr's one-time authorization code back to the app and runs no analytics. Visiting these pages may produce ordinary web-server logs (IP address, user agent, time) on the host. Those logs are not used to build a profile of app users.

Children

The app is not directed at children under 13, and I do not knowingly collect their personal information.

Your choices

You can remove a connected account in the app, which deletes its local token and, when the network allows it, revokes access. You can delete the app to remove the on-device cache. You can manage iCloud data in Apple's settings. You can cancel the subscription in your Apple ID settings.

Changes

I may update this policy. The date at the top will change when I do.

Contact

Privacy questions: jtl@brettterpstra.com.