Legal

Privacy Policy

Effective date: May 4, 2026 · Governed by the laws of Texas, USA

The short version: we collect only what we need to run the service. We don't sell your data. We don't share it with advertisers. We never will. That's a promise, not a policy checkbox.

1. Who we are

tex.ag is an independent platform built for the Aggie community. We are not affiliated with Texas A&M University or The Association of Former Students. "We", "us", and "our" refer to tex.ag and its operator.

2. What we collect

When you create an account we collect:

Your username and tex.ag name (biolinkname)
Your email address
Your password (stored as a one-way hash — we cannot read it)
Optional profile information you choose to provide: display name, bio, class year, profile photo

When you use the platform we collect:

The links and social profiles you add to your page
Click analytics — a daily-rotating hash of visitor IP addresses (never the raw IP), device type, and referrer URL
Your login history for security purposes

We do not collect:

Raw IP addresses stored long-term
Browser fingerprints
Advertising identifiers
Any data from third-party tracking services

3. How we use your data

We use your data only to:

Operate your tex.ag account and biolink page
Send transactional emails — account verification, password resets, billing receipts
Show you click analytics on your own links
Detect and prevent abuse

We do not use your data for advertising. We do not build profiles for sale. We do not share your data with third parties except as described in Section 5.

4. Cookies and sessions

We use a single session cookie to keep you logged in. If you choose "Trust this device" at login, an additional cookie is stored on that device for up to 30 days. You can revoke trusted devices at any time from your account settings. We do not use advertising cookies or third-party tracking cookies.

5. Third-party services

We use the following third-party services to operate the platform:

Stripe — payment processing for paid plans. We never store your card details. Stripe's privacy policy applies to payment data.
Postmark — transactional email delivery. Your email address is transmitted to Postmark to send account emails.
Google Fonts — typography. Your browser may request fonts from Google's servers when viewing tex.ag pages.
Font Awesome — icons. Loaded from a CDN; standard CDN access logs may apply.

We do not use Google Analytics, Facebook Pixel, or any advertising network.

6. Your rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate data from your account settings
Delete your account — request deletion from account settings; your data is permanently removed after a 30-day grace period
Export your data — contact us and we will provide a copy

7. Data retention

Active account data is retained for as long as your account exists. After account deletion is confirmed, all personal data is purged within 30 days. Anonymized aggregate analytics (total click counts with no personal identifiers) may be retained indefinitely.

8. Security

Passwords are hashed using bcrypt with a work factor of 12. Visitor IP addresses are hashed with a daily-rotating salt before storage. All connections are encrypted via HTTPS. Session cookies are HttpOnly and SameSite=Strict.

9. Children

tex.ag is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will remove it promptly.

10. Changes to this policy

If we make material changes to this policy we will notify registered users by email and update the effective date above. Continued use of the platform after notice constitutes acceptance.