Privacy Policy & Zero-Storage Architecture
Last updated: October 2026 • Designed from the ground up for minimal retention, automated deletion, and local-first execution.
1. Hyper-Local Geospatial Privacy & Radius Obfuscation
LinkFC uses geospatial radius queries (e.g. strict 2km–5km zones) to connect neighbors, spotters, and task bounty claimants. Your precise real-time coordinates are never broadcast to the public. All discovery cards display approximate neighborhood boundaries or landmarks (e.g. “Near Main Bazaar, Downtown District”) rather than exact geographic pins.
2. Ephemeral TTL Data Deletion (Zero Long-Term Storage Bloat)
We believe data that has served its purpose should cease to exist. LinkFC automatically purges expired records:
- Commute carpool posts auto-delete 2 hours after scheduled departure time.
- Flash merchant deals auto-delete after 24 hours.
- Gig task bounties auto-close and purge 48 hours post-creation.
- Vehicle blocker alerts and ultrasonic audio signals auto-expire upon resolution or after 4 hours.
3. Client-Side Browser Media Offloading
Raw photos captured on mobile cameras (5MB–12MB) are never uploaded unprocessed. The LinkFC Progressive Web App utilizes hardware-accelerated HTML5 canvas compression on your device, converting imagery into compact sub-800px WebP thumbnails before upload. The moment a parent listing expires, associated media files are immediately and permanently removed.
4. Contact Masking & Handshake Cryptography
Your personal phone number and direct social handles remain completely invisible to nearby strangers on the radar deck until both parties execute a mutual Handshake. Instant communications use peer-to-peer WebRTC encrypted channels.