# Privacy and personal data

See what visitor data click tracking stores and sends, set how much it keeps, and export or erase a person's click data.
Page: https://docs.linkmanagerpro.com/guides/privacy
Use when someone asks: gdpr link click tracking; anonymize ip click tracking; erase personal data clicks; cookie consent link tracking
Intent: Info

Link Manager Pro keeps most of its visitor data in click records on your server, plus a tracking cookie in the visitor's browser. You decide how much it keeps. Preparing a GDPR or other privacy review of your link click tracking? This page collects the places where visitor data is stored or sent, and the settings that control them.

- While **Click tracking** is on, each counted click stores the visitor's IP address, browser details, referring page and a few more details. **Anonymize IP addresses** shortens the IP address. It's on by default on new sites.
- **Keep click data for** deletes old click records every day. By default nothing is deleted.
- The tracking cookie waits for consent while **Respect visitor consent** is on (the default) and Complianz, CookieYes or Cookiebot is active.
- WordPress's **Export Personal Data** and **Erase Personal Data** tools include **Link Manager Pro clicks**. Erasing anonymizes those clicks and keeps your totals.

This page says what the plugin does and what you can set. Which rules apply to your site, and what you have to ask visitors for, is a question for your privacy adviser.

## What does Link Manager Pro store about visitors?

Link Manager Pro stores one click record for every counted click on a short link or its other addresses. Each redirect hit gets one too. Each record holds the time, the link, the visitor's IP address and their browser details (the user agent). It also holds the page they came from, the country if known, and the tracking cookie's random ID. It can hold the post the click came from and the routing rule that matched. It also keeps any `utm_` values in the address, and the WordPress user ID of a logged-in visitor.

The full list, and which clicks are never recorded, is on [How clicks are counted](https://docs.linkmanagerpro.com/features/click-tracking#what-counts-as-a-click). A few more places hold visitor data:

| Where | What it holds | When |
|---|---|---|
| Clicks on links to your own pages | Similar details, plus the address and text of the link that was clicked. No country | Only while **Track clicks on internal links** is on ([internal click tracking](https://docs.linkmanagerpro.com/features/internal-click-tracking)) |
| The `link_manager_pro_id` cookie | A random ID that tells first clicks from repeat ones. It lasts 1 year | Set at a visit through a short link or redirect, only while **Click tracking** is on, and after consent where a supported consent plugin asks for it |
| A `lmpro_pw_` cookie, followed by the link's number | A code that shows the right password was entered, so the visitor isn't asked again. It lasts 1 day | Only after someone enters the right password on a password-protected short link. It doesn't wait for consent |
| **Visitor 404s** in Link Health | The missing address, the page that linked to it and how often it was hit. No IP address, browser details or cookie | When a visitor hits a missing page that **Track visitor 404s** logs. Kept until cleared, unless **Keep visitor 404s** is set ([Link Health](https://docs.linkmanagerpro.com/features/health-monitoring#monitor-404-errors-from-visitors)) |

A click on a short link is recorded on your server. No tracking script runs in the visitor's browser for it. Clicks on links to your own pages are the exception: a small script in the page sends them.

## Settings that control visitor data

These settings decide what's stored about clicks and for how long. They're all under Link Manager › Settings, on the tab named in the table. Only administrators see Settings.

| To | Setting | Tab | Default | What changes |
|---|---|---|---|---|
| Store shortened IP addresses | **Anonymize IP addresses** | Tracking | Off (On on new sites) | Clicks recorded from then on. [More](#anonymize-ip-addresses-in-click-tracking) |
| Delete old click records | **Keep click data for** | Tracking | 0 days (keep forever) | Older records go once a day. [More](#how-long-is-click-data-kept) |
| Make the cookie wait for consent | **Respect visitor consent** and **Consent category** | Integrations | On, Statistics | Applies while Complianz, CookieYes or Cookiebot is active. [More](#cookie-consent-for-link-tracking) |
| Stop recording clicks | **Click tracking** | Tracking | On | No new click records and no new cookie. Visitors are still redirected |
| Record clicks on links to your own pages | **Track clicks on internal links** | Tracking | Off | Adds those clicks to the click records |
| Remove all data when you delete the plugin | **Delete all data when the plugin is deleted** | Advanced | Off | Deleting the plugin then removes its data, click records included. [More](#backups-imports-and-uninstall) |

Every setting and its options are explained on [Tracking settings](https://docs.linkmanagerpro.com/guides/settings/tracking), [Integrations settings](https://docs.linkmanagerpro.com/guides/settings/integrations) and [Advanced settings](https://docs.linkmanagerpro.com/guides/settings/advanced). Visitor 404s have their own two settings on the Link Intelligence tab ([Link Intelligence settings](https://docs.linkmanagerpro.com/guides/settings/link-intelligence)).

## Anonymize IP addresses in click tracking

**Anonymize IP addresses** shortens each visitor's IP address before it's stored. It uses WordPress's own anonymizer: an IPv4 address gets 0 as its last part (`203.0.113.0`), and an IPv6 address keeps only its network part, the first four groups.

- New sites start with it on, as long as the Tracking tab was never saved. A site that had Link Manager Pro before keeps its earlier value, unless its data was deleted along with the plugin. That value is off unless someone turned it on ([Starting settings on a new site](https://docs.linkmanagerpro.com/getting-started/installation#starting-settings-on-a-new-site)).
- It changes only clicks recorded from then on. Clicks already stored keep their full addresses, and no button shortens them afterwards. They go when **Keep click data for** deletes them. A logged-in visitor's clicks can also be cleared with an erase request.
- Clicks you import from another plugin, and clicks you restore from a backup, are shortened too while it's on.
- Country detection, **Blocked IP addresses** and the repeat-click limit read the full address before anything is stored. They work the same with it on.
- **Unique clicks** compare stored addresses. With it on, visitors on the same network with the same browser count as one.

While it's off and clicks are recorded, WordPress Site Health recommends turning it on, with a link to the Tracking tab. More on [Tracking settings](https://docs.linkmanagerpro.com/guides/settings/tracking#anonymize-ip-addresses).

## How long is click data kept?

Click data is kept until you set **Keep click data for** under Link Manager › Settings › Tracking. The default, 0 days, keeps every record. With a number of days set, a daily task deletes each click record older than that, with its IP address, browser details and `utm_` values.

- It covers clicks on short links, redirect hits and clicks on links to your own pages.
- Each short link's **All-time clicks** and each redirect's **Hits** don't go down. They're counters and hold no visitor details.
- Deleted records can't be brought back.

The timing, the warning and the `wp link-manager-pro purge-clicks` command are on [Tracking settings](https://docs.linkmanagerpro.com/guides/settings/tracking#keep-click-data-for).

## Cookie consent for link tracking

The tracking cookie waits for consent while **Respect visitor consent** is on (the default) and Complianz, CookieYes or Cookiebot is active. The cookie is set once the consent plugin reports that the visitor accepted the **Consent category**, Statistics by default. Without consent, no cookie is set, and an existing one is deleted at their next visit through a short link or redirect.

Consent covers the cookie only. While **Click tracking** is on, clicks are still recorded without consent, with the IP address and browser details. So pair consent with **Anonymize IP addresses** and a **Keep click data for** period if you want to store less.

- With none of the three consent plugins active, the cookie is set without waiting.
- The **Cookie notice** switch on the Affiliate disclosure tab, **I handle cookie consent for my visitors**, doesn't change any of this ([Affiliate disclosure settings](https://docs.linkmanagerpro.com/guides/settings/disclosure#cookie-notice-setting)).
- Developers can decide consent with the `link_manager_pro_cookie_consent` filter.

How each consent plugin is read is on [Integrations settings](https://docs.linkmanagerpro.com/guides/settings/integrations#cookie-consent-for-link-tracking).

## Export or erase a visitor's click data

WordPress's own privacy tools include Link Manager Pro's click records, listed as **Link Manager Pro clicks**. They find the clicks recorded while the person was logged in to the account with that email address. Erasing anonymizes those clicks instead of deleting them, so your click totals stay the same.

### Export someone's click data

1. In WordPress, go to **Tools** › **Export Personal Data**.
2. Enter the person's username or email in **Username or email address**, then select **Send Request**. WordPress emails them a confirmation link, unless you untick the confirmation email.
3. Once the request is confirmed, hover the person's email in the request list and select **Download personal data**. To email them a link to the file instead, select **Send export link** under **Next steps**. That link expires after 3 days.

The download holds a **Link clicks** group with one item per click. Each item can show **Date**, **Click type** (**Short link** or **Link inside a post**), **Short link**, **Link address** and **Link text**. It goes on with **Clicked on page**, **IP address**, **User agent**, **Referring page**, **Country**, **Cookie ID** and any `utm_` values. **Short link** holds the link's full address, built with the prefix your site uses for it today, so a link to an affiliate's domain shows your **Affiliate link prefix** when you set one. Empty fields are left out.

### Erase someone's click data

1. In WordPress, go to **Tools** › **Erase Personal Data**.
2. Enter the person's username or email in **Username or email address**, then select **Send Request**. WordPress emails them a confirmation link, unless you untick the confirmation email.

::: warning
The next step runs every eraser on your site at once, not only Link Manager Pro's, for example WordPress's own for comments. Erasing can't be undone in WordPress. Restoring an older Link Manager Pro backup with **Clicks**, or any other database backup (for example your host's), brings the erased details back. A Link Manager Pro restore also replaces the clicks recorded since.
:::

3. Once the request is confirmed, select **Erase personal data** under **Next steps** in its row.

Erasing clears five details on each of that account's clicks: the user ID, the cookie ID, the IP address, the user agent and the referring page's full address. It does the same to clicks made while logged out that carry one of the same cookie IDs, for example from the same browser. When it's done, WordPress shows Link Manager Pro's notes about logged-out clicks and backups.

What stays on each erased click includes its time, the link, the post, the country, the referring site's domain and any `utm_` values. A click on a link to your own pages also keeps that link's address and text. **Clicks**, **Unique clicks** and **All-time clicks** don't change. Reports can no longer tell the device or browser of those clicks.

What the tools don't reach:

- Visitors without an account. Their clicks carry no name or email, so the tools can't find them.
- Clicks made while logged out, unless they share a cookie ID with the account's clicks. An export never includes those.
- Backup files, on your server or downloaded. Delete older backups after an erasure ([Backup and restore](https://docs.linkmanagerpro.com/guides/backup-restore#where-backup-files-are-kept-and-for-how-long)).

When you delete a user account, its clicks are unlinked from it: the user ID is cleared and nothing else changes. On a multisite network, that happens only when the account itself is deleted. Deleting it from Network Admin unlinks its clicks on every site of the network that has the plugin's clicks table. Removing the account from one site keeps the link.

## What's in the privacy policy guide?

Link Manager Pro adds a **Link Manager Pro** section to WordPress's privacy policy guide, under **Settings** › **Privacy** › **Policy Guide**. It has suggested text for your policy and notes for you. It's a starting point to review and adapt, not finished legal text.

The suggested text covers link clicks, cookies, how long click data is kept, export and erasure, and what webhooks and automation tools receive. It follows your settings: it says whether IP addresses are shortened, and how many days click records are kept. If you change **Anonymize IP addresses** or **Keep click data for**, update your policy too. WordPress can remind you with a notice on **Settings** › **Privacy** that the suggested privacy policy text has changed.

The notes cover backups, imported click history, how export and erase requests work, and the AI features. **Copy suggested policy text to clipboard** copies the suggested text and leaves the notes out.

## What leaves your site?

Click records stay in your site's database unless you download them, in a backup or an export. The features below send data off your site once you set them up or use them. The table says how much of it is about visitors.

| Where it goes | What's sent | Visitor data in it |
|---|---|---|
| Your AI provider | When an editor uses **Analyze content** or **AI Link**: the post text (first 8,000 characters, HTML removed), the selected text, and up to 50 matching short links that work for anyone, with their slug, destination and up to eight keywords | None. No click data, IP addresses or cookies ([What does the AI provider receive?](https://docs.linkmanagerpro.com/guides/settings/ai#what-does-the-ai-provider-receive)) |
| Your webhook endpoints and AutomatorWP | For each counted click, when a webhook or recipe uses the click event: the link's ID, slug and destination, its click total, the country code and the referring site's domain | No IP address, browser details, cookie ID or user ID ([Webhooks and AutomatorWP](https://docs.linkmanagerpro.com/guides/webhooks-automation)) |
| The **Email digest**, to the addresses you set | Click totals for the period, and top lists of short links, posts, countries and affiliates | None per visitor ([Notifications settings](https://docs.linkmanagerpro.com/guides/settings/notifications)) |
| The GeoIP download | Your server downloads the country database from `cdn.jsdelivr.net` when you select **Download database** | None. Countries are then looked up on your own server |
| Plugin update checks, to solvixstudio.com | Details about your site, such as its address, WordPress and PHP versions, language, whether it's multisite and the plugin version | No visitor data ([Update Link Manager Pro](https://docs.linkmanagerpro.com/getting-started/installation#update-link-manager-pro)) |
| Backup files | Downloaded to your computer when you back up with **Clicks** ticked | All click records, with IP addresses as stored |

A click's country comes from the local GeoIP database or from a CDN header you've allowed (**Trust proxy headers**, or a trusted proxy). No outside service is asked ([where a click's country comes from](https://docs.linkmanagerpro.com/features/click-tracking#where-does-a-click-s-country-come-from)).

## Backups, imports and uninstall

Click data can also live in backup files, come in with an import, and stay on your site after you delete the plugin. Here's what happens in each case.

- Backups: a backup with **Clicks** ticked holds every click record, with IP addresses, cookie IDs, user agents and UTM details as stored. The copy kept on your server is usually deleted after one to two days, if WordPress's scheduled tasks run. Files you download are yours to keep safe and delete. Retention and erase requests don't reach backup files, on your server or downloaded ([What's in a backup file?](https://docs.linkmanagerpro.com/guides/backup-restore#what-s-in-a-backup-file)).
- Imports: clicks imported from Pretty Links, ThirstyAffiliates or BetterLinks keep the details that plugin stored, including its visitor IDs. Their IP addresses are shortened only while **Anonymize IP addresses** is on ([Migrate to Link Manager Pro](https://docs.linkmanagerpro.com/migration/)).
- Uninstall: deactivating keeps all data. Deleting the plugin removes its data, click records included, only while **Delete all data when the plugin is deleted** is on ([Uninstall and delete data](https://docs.linkmanagerpro.com/guides/uninstall)).

## Get more out of it

- Store less and keep each link's total. Keep **Anonymize IP addresses** on and set **Keep click data for** to the period you actually look back on, such as 365 days. Countries, blocking and the repeat-click limit still work, and **All-time clicks** keeps each link's total. Report periods older than that empty out.
- Check an older site. If Link Manager Pro was installed before, **Anonymize IP addresses** may be off. WordPress Site Health under **Tools** › **Site Health** says so while full addresses are being stored.
- Write your policy from the guide. Open the **Link Manager Pro** section of the privacy policy guide after you set your tracking options. Its suggested text then matches what your site stores.
- After an erase request, clean up backups. Delete downloaded backup files that hold **Clicks** from before the request, or a later restore brings the erased details back.
- Test the consent wait yourself with an opt-in banner. In a private window, open your site and don't answer the banner. Follow a short link, then come back to any page of your site. In your browser's developer tools, look at your site's cookies (the Application or Storage panel): there's no `link_manager_pro_id`. Accept statistics in the banner, follow a short link again, come back, and the cookie is there. Complianz can count a visitor as consenting from its region settings, without the banner being answered.

## If something goes wrong

- If an export has no **Link clicks** group, then no click is linked to that account. None was recorded while they were logged in, or those clicks were already erased or deleted. Clicks made while logged out aren't matched to an account.
- If stored clicks still show full IP addresses after you turned on **Anonymize IP addresses**, then those clicks were recorded before. Only new clicks are shortened. Set **Keep click data for** to remove older records over time.
- If an erasure says some click records could not be anonymized because of a database error, then run it again. Under **Tools** › **Erase Personal Data**, hover the person's email and select **Force erase personal data**. Erasing again is safe: clicks already anonymized stay as they are.
- If the tracking cookie is set before visitors consent, then check that **Respect visitor consent** is on under Link Manager › Settings › Integrations. Also check that your consent plugin is Complianz, CookieYes or Cookiebot. With another consent plugin, a developer needs the `link_manager_pro_cookie_consent` filter.

More fixes are on [Troubleshooting](https://docs.linkmanagerpro.com/troubleshooting).

## Related

- [How clicks are counted](https://docs.linkmanagerpro.com/features/click-tracking)
- [Tracking settings](https://docs.linkmanagerpro.com/guides/settings/tracking)
- [Integrations settings](https://docs.linkmanagerpro.com/guides/settings/integrations)
- [Back up and restore](https://docs.linkmanagerpro.com/guides/backup-restore)
- [Troubleshooting](https://docs.linkmanagerpro.com/troubleshooting)