LinkMesh

Search docs, blog and changelog

ENDE

Privacy

Privacy Policy

This policy describes what data linkmesh.io (this marketing website) collects, how it's used, and what your rights are. It does not describe data handling inside the LinkMesh product itself — that runs on your own infrastructure and never reaches us. See Trust for the product-level details.

Effective date: 2026-09-18 · Last reviewed: 2026-09-18.

Who we are

LinkMesh is a product of OpenSight, the sole proprietorship (Einzelunternehmen) of Roman Hüsler, registered in Switzerland. The data controller in the sense of revFADP / GDPR Art. 4(7) is Roman Hüsler.

Contact for any privacy questions, access requests, or deletion requests: info@opensight.ch.

What this website collects

Contact, early-access and design-partner forms

Three forms on this site send us personal data. They are the only place linkmesh.io asks you for anything about yourself, and they work whether or not you accept analytics cookies — submitting one is your choice, not a condition of using the site.

  • The Get in touch form collects your name, email address, company (optional) and your message.
  • The early-access signup on the homepage collects your email address only.
  • The design-partner application on /design-partner/ collects your name, email address, company (optional) and your message.

We use these solely to answer your enquiry, to contact you about early access, or to assess and respond to your design-partner application. They are never used for analytics, profiling or advertising, and we do not sell them or pass them to anyone else for marketing.

Each submission is emailed to info@opensight.ch and stored in our database, so that an enquiry is not lost if the email fails to send. We keep submissions for 24 months, after which they are deleted automatically.

To have a submission deleted sooner, email info@opensight.ch. There is no self-service delete yet — we action these by hand on request.

Google Analytics (only with consent)

If you click Accept on the cookie banner, this site loads Google Analytics 4 and records:

  • Pages you visit (page_view)
  • Clicks on CTA buttons (cta_click, install_click, docs_click, download_click) — what was clicked, not who you are
  • Approximate location (city-level), browser, device class

We do not record:

  • Your name, email, or phone number — analytics never receives them, including anything you type into the forms above
  • Payment data
  • Behavioural-advertising or remarketing identifiers (ad signals are permanently denied in our Google Tag configuration)

If you click Decline, no Google Analytics cookies are set and no data is sent to Google. The site works identically either way.

Google's own processing is described in their privacy policy at policies.google.com/privacy. Data is processed in the United States; we enable IP anonymisation (anonymize_ip: true) so the last octet of your IP is dropped before storage.

PostHog analytics

Alongside Google Analytics, we use PostHog for product analytics — how pages and features are used, so we can improve them. If you click Accept, PostHog records page views and autocaptured interactions (clicks and the like), tied to a persistent device ID rather than your name. If you click Decline, or leave the banner unanswered, PostHog may collect anonymous cookieless aggregate activity using a privacy-preserving server hash. We keep it to product analytics and session replay (below) — no heatmaps, no surveys, and no experiments.

Session replay (only with consent)

If you click Accept, PostHog also records a session replay: a reconstruction of your visit to this website — the pages you saw, and your clicks, scrolling and mouse movement — which we replay to find confusing or broken parts of the site. It is not a video of your screen and it does not use your camera, microphone or any other window or tab.

Everything you type into a form is masked before the recording leaves your browser, so a replay never contains your name, email address, phone number or message. Replays are tied to the same device ID as the rest of the analytics, are stored in PostHog's EU Cloud, and are deleted after 30 days. Recordings from short visits (under two seconds) are not kept at all.

No session replay is recorded before you accept. If you click Decline, or never answer the banner, no replay is ever made. If you accept and later decline, recording stops immediately — you can withdraw at any time, in one click, on the Cookies page.

Before you accept, PostHog runs in cookieless mode — no cookie or local/session storage identifier is written. This allows minimal anonymous aggregate analytics while the banner is unanswered or after Decline; session replay is never used.

We use PostHog's EU Cloud, so this data is processed and stored in the European Union. PostHog's processing is described at posthog.com/privacy.

Cookie-consent state

We store one entry in your browser's localStorage under the key linkmesh-consent-v2, containing either "granted" or"denied". This remembers your choice so we don't re-ask on every page. It is not a cookie and is never sent over the network. Clearing it re-shows the banner.

Server access logs

Our hosting provider keeps standard nginx access logs (IP address, timestamp, URL, status code, user-agent). These are used solely for diagnostics and are not joined to analytics data.

What this website does not collect

  • No newsletter signup, no trial registration, and no account creation on this site — the contact form and the early-access signup described above are the only things to fill out.
  • No third-party trackers other than Google Analytics and PostHog, with persistent analytics and replay consent-gated (no Facebook Pixel, LinkedIn Insight Tag, TikTok pixel, ad-network trackers, etc.).
  • No behavioural advertising or remarketing identifiers and no A/B-testing. PostHog's rejected mode is cookieless and aggregate; session replay and form-input capture require consent.

What about the product?

The LinkMesh product runs on your infrastructure, processing your telemetry through Collectors you operate. None of that data reaches OpenSight. Product binaries do not phone home, do not report usage, and do not check in with our servers.

This is by design — LinkMesh is an on-premises tool. See Trust for the architectural detail, and Data handling & DPA for the procurement-grade summary and sub-processors list.

Your rights

Under Swiss data protection law (revFADP) and the EU GDPR (where applicable), you have the right to:

  • Ask what data we hold about you (access request)
  • Ask us to correct or delete it
  • Withdraw consent at any time
  • Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or your local EU supervisory authority

To exercise these rights, email info@opensight.ch. If you have never submitted one of the forms above, the answer to an access request is "we hold no personally identifiable data about you" — the rest of what this site collects is analytics events tied only to short-lived browser identifiers. If you have submitted one, we hold that submission until it ages out at 24 months or you ask us to delete it.

Updates

We may update this policy. The effective date at the top changes when we do. For substantive changes (new tracking technologies, new data flows), we'll surface a notice on the cookie banner the next time you visit.