Privacy notice

Last updated 25 October 2026.

“We” on this site means me, the person who runs direct.bio.

This page explains what direct.bio stores about you, why, who usernames it, and how to have it removed. We keep it short on purpose.

What is public

Everything on a page you publish is public: the address you chose, your name, bio, avatar, links and theme. Anyone can read it, and search engines can list it. Do not put anything in a page that you want to keep private.

Reporting a page, and the guidelines

Every public page has a “Report” link. It opens an email to us that names the page, and anyone can use it. We read each report and may remove a page or close an account that breaks our rules. Because pages are public, we ask everyone who publishes one to follow the guidelines in the terms of use: publish only what you have the right to share, nothing illegal, abusive, deceptive or private to someone else, and nothing that harms or misleads people. The email address of whoever sends a report is used only to username that report.

Being listed

Your page is not listed anywhere unless you choose it. When you publish you can tick two boxes. “List my page” puts it among the pages shown at direct.bio/pages, which shows the 20 most recently updated listed pages in random order. “Feature my page” asks to be shown on the home page; we check each request and may decline it, and an approved page is looked at again whenever you change it. You can untick either box and publish again at any time, and the page is removed from that list at once.

What we store about you

• Your email address, the date you signed up and the date you last signed in.
• The pages you publish, with the date they were created and last changed.
• How many times each page of the site was opened, as totals per day for the last 180 days. Robots are left out, and who opened it is not recorded.
• How many times each link on your page was clicked, as totals per day for the last 90 days. Who clicked is not recorded: no address, browser or cookie.
• If you add a passkey: its public key, a counter and a name such as “Passkey 1”. The secret part stays on your device, and your fingerprint, face or PIN is never sent. Removing the passkey, or deleting your account, deletes them.
• The language settings you chose (site language and public page language, English or Hebrew), so the site opens in your language when you return.
• Whether you chose to be listed or featured, whether a featured request was approved, and, if it was not, a short reason chosen from a fixed list.

Your email address is never shown on your page. Your password is kept only as a scrambled value, so we cannot read it. Apart from what you choose to put on your page, we do not ask for a phone number or any payment details to use direct.bio.

Why we use your email

To send you your sign-in code, and for service messages about your own account or page, for example a page that is empty, a link that is broken, or a reply to a question you sent us. We do not send promotions and we do not sell or rent your email address.

Who usernames your data

• Cloudflare hosts the site and the database that holds accounts and pages.
• Resend delivers the emails we send, including sign-in codes and support replies.

These companies process data for us and have their own security and privacy terms. They may run servers outside your country.

Cookies, tracking and your browser

direct.bio sets no cookies, has no advertising and runs no analytics or tracking scripts. It loads nothing from other websites.

After you publish, the builder shows links for sharing your page, such as WhatsApp, Facebook, X, Telegram, LinkedIn and email. They are ordinary links. Nothing from those sites is loaded on direct.bio, and another site only receives the address of your page when you click its link.

Nothing you type into the builder is saved on your device. An unpublished page is lost if you close the tab. Once you sign in, your browser keeps a sign-in session on your own device so you stay signed in. Signing out removes it, and you can also clear it in your browser settings at any time. If you use the Theme list (Automatic, Dark or Light), your browser also remembers that choice on your device. It is never sent to us.

Like any website, our hosting provider sees technical details of each visit, such as the address of your device, to deliver the page and to protect the site from abuse.

How long we keep it

We keep your account and your page until you ask us to remove them, or until we remove them under the terms of use.

When you create an account we save your email address, the date you signed up and a scrambled copy of your password in our own database. If you sign in but never publish, they are removed automatically after a while (see below). If you delete your page, your account stays, so you can sign in again.

A sign-in that has no page is removed automatically, 14 days after the date you signed up (or after your last sign-in, if that is later). We check once a day. You can simply sign in again if you come back. For sign-ins made before 10 October 2026, the date this policy took effect, the 14 days count from 10 October 2026, so a sign-in with no page is removed on 24 October 2026 at the earliest. If you publish a page, none of this applies and your account stays until you ask us to remove it.

A page removed for breaking the terms of use is kept hidden for 7 days, together with the reason it was removed, and then deleted with the account it belongs to. If we find that the removal was a mistake, the page is put back as it was.

Your choices and deleting your data

You can change or republish your page at any time. When you are signed in, the builder on the home page has a “Your account” section. “Download my data” saves everything we keep about you as one file on your device: your sign-in email address, your page as saved (including links you have hidden), where it appears, and the click totals of your links. It also has two buttons for deleting:

• “Delete my page” removes your page at once and frees the address. Your account stays, so you can sign in and make a new page, until you delete your account or it is removed because it has no page, 14 days after you signed up (or after 24 October 2026 if you signed up before 10 October 2026).
• “Delete my account” removes your page, your account (email address, dates and the scrambled password), and signs you out.

Deleting cannot be undone. Copies of a public page in search engine caches can take a little longer to disappear. To see the data we hold about you, to correct it, or if the buttons do not work for you, email support@direct.bio from the address you signed in with and we will do it for you and confirm when it is done.

In the Publish section you can make your page private, so that only you can open it while signed in. A private page is not listed, not featured and not in our sitemap. You can also ask search engines to keep your page out of their results; that is a request, and anyone with the address can still open the page. A link you hide stays saved with your page, but visitors do not see it.

If the domain or the service is sold

The direct.bio domain name is for sale. A sale of the domain name alone does not include accounts or published pages.

We may also sell the whole service: the domain, the site and its code, the published pages and the accounts. If that happens, your account and page would go to the new owner. If we can, we will tell you by email first. You can delete your account at any time, as described above, if you do not want that.

Changes to this notice

We reserve the right to change or modify this notice at any time. The date at the top shows the latest version. If we change it in a way that matters, we will update the date and, for important changes, tell signed-in users by email.

Questions? Write to support@direct.bio.
The Direct.bio team