Is Linktree GDPR Compliant? What We Checked (2026)
Short answer (checked September 2026)
There’s no yes-or-no answer: it depends on how you use it. Linktree offers a DPA, but its privacy notice sends data to Australia and the US under standard contractual clauses[1]. As of 25 September 2026, its profiles show a cookie-consent banner[5]; pixels you add are your responsibility[6].
The Checklist: Linktree and MinglyLink Side by Side
The MinglyLink column was checked in our own code rather than copied from a marketing page; the Linktree column cites the numbered sources further down. The last column shows how to check each point yourself, on any tool. Where we cannot prove something, we say so.
| Item | Linktree | MinglyLink | How to verify yourself |
|---|---|---|---|
| Company and legal basis | Linktree Pty Ltd, Melbourne, Australia; Australia has no EU adequacy decision1, 2 | MinglyLink Ltd, England & Wales (Company No. 16484762), subject to UK GDPR | Read the provider’s privacy notice and imprint for the legal entity and country. |
| Where visitor data goes | Australia, the US and other countries, under standard contractual clauses1 | Hosting region not published yet; ask us (info@mingly.link) if you need it for your records | Search the privacy notice for “transfer”, “standard contractual clauses” or “Data Privacy Framework”. |
| Cookies before consent | Consent banner on profile pages (checked 25 Sep 2026); cookies set without opt-in were reported in 20253, 4, 5 | None: a public bio page sets no cookies | Open the page in a private window; before you touch the banner, check DevTools → Application → Cookies. |
| Tracking pixels | Owners can add Meta, TikTok and Google Analytics pixels, set for the owner’s own purposes5, 6 | No third-party tracking scripts; visits and clicks are counted first-party (IP address and user agent stored for fraud prevention) | DevTools → Network: filter for facebook, tiktok and google-analytics. |
| Google servers and other third parties | Page source preconnects to Google’s font servers; brand font self-hosted5 | No Google Fonts; one third-party request: an IP lookup via api.ipify.org (contact-form limit and self-click checks) | DevTools → Network: sort by domain and list everything that isn’t the tool’s own. |
| Ads | — | Own inventory only, optional; no ad-network scripts | DevTools → Network: look for doubleclick or googlesyndication. |
| Impressum / legal notice | A regular link in your list: two taps from Instagram, which meets the two-click threshold7, 8 | Dedicated field shown in the page footer: one tap from Instagram | From your Instagram profile, count the taps to your Impressum. |
| Data processing agreement (DPA) | Offered4 | On request: info@mingly.link | Ask for the DPA before you publish and keep a copy. |
“—” = not verified, so not claimed. Superscripts refer to the numbered sources further down. The full comparison with Beacons, Stan Store and Lnk.Bio is on the free Linktree alternative page; the German checklist (Serverstandort, AVV, Impressum-Feld, Firmensitz) is on /de/linktree-alternative.
GDPR compliance depends on how you run your page as much as on the tool behind it, so this article lists what you can actually check, each point with a source and a date, how MinglyLink handles the same point, and when an EU-hosted tool is still the better choice. If you just want the comparison, start at the free Linktree alternative page (auf Deutsch). This check is also in German (Ist Linktree DSGVO-konform?) and Spanish (¿Linktree es compatible con el GDPR?).
This article isn't a scare piece. Linktree has taken real steps: it offers a Data Processing Addendum[4], relies on Standard Contractual Clauses for international transfers[1] and now asks visitors for cookie consent[5]. There are still legitimate reasons to consider alternatives, especially if your audience is primarily European or your industry has strict compliance requirements. Let's walk through what actually matters. (A checklist, not legal advice.)
Why Link-in-Bio Tools Raise GDPR Questions
Every link-in-bio tool collects data about the people who visit your page. At minimum: IP addresses, device information, browser type, click timestamps, and referrer data. Some tools also set tracking cookies and integrate with third-party analytics.
Under the GDPR (known as DSGVO in German), this data collection has rules. The two biggest ones for link-in-bio tools:
Data transfer restrictions. Personal data from EU residents can only be transferred to countries with "adequate" data protection — or with specific legal safeguards like Standard Contractual Clauses (SCCs). The US does not have an adequacy decision for general data transfers (the EU-US Data Privacy Framework covers certified companies, but coverage varies).
Transparency and consent. Visitors must be told what data is collected and why, and non-essential cookies and tracking need their consent first (in Germany, § 25 TDDDG[9]). Tracking pixels added to a page are the most common way to trigger that obligation.
Where Linktree Stands: Four Checks, With Sources
1. Where the company is and where data goes
Linktree Pty Ltd is headquartered in Melbourne, Australia. Its privacy notice (effective 5 July 2026) says personal information may be transferred to Australia, the United States and other countries where it does business, safeguarded by standard contractual clauses or adequacy decisions[1]. Australia has no EU adequacy decision[2], so transfers there rest on contracts rather than on an adequacy finding, and since the Schrems II ruling (Court of Justice of the EU, July 2020) such contracts have to be backed by an assessment of the destination country's law. The German legal portal e-recht24 lists the non-EU servers among its concerns about Linktree[4].
2. Cookies before consent
In February 2025, vgsd.de reported that Linktree set cookies before visitors could opt in[3]; e-recht24 (November 2025) described the same problem and noted that Linktree has since added a cookie-consent tool[4]. When we opened five public Linktree profiles on 25 September 2026, each loaded a consent manager (DataGrail) with the cookie banner switched on[5]. What to check on your own page: open it in a private window from an EU connection and confirm the banner appears before anything non-essential loads.
3. Tracking pixels you add yourself
Linktree lets page owners add their own tracking; the profiles we checked carry separate consent switches for Meta Pixel, TikTok Pixel and Google Analytics[5], and Linktree's cookie notice describes those cookies as set by owners "for their own independent purposes"[6]. In practice that makes you the one answering for them: name them in your privacy policy, and only add the pixels you actually use. For a broader comparison of paid-vs-free tradeoffs, see our free Linktree alternatives roundup.
4. The German Impressum and the "two-click rule"
German law requires the Impressum of a commercial page to be "easily recognisable, directly accessible and permanently available" (§ 5 DDG)[7]. The Federal Court of Justice accepted an Impressum reached through two clearly labelled links as directly accessible (BGH, I ZR 228/03, 20 July 2006)[8], which is where the two-click rule comes from. On Linktree, an Impressum link at the top of your page is two taps from Instagram (bio link → Impressum), which meets that threshold. The risk starts when it sits further away, for example on a website behind your Linktree, and a missing or hard-to-find Impressum is one of the classic triggers for an Abmahnung (formal legal warning) in Germany.
Cost, while we are at it. Linktree's free plan takes 12% of digital product and course sales (9% on Starter and Pro, 0% only on the $35 Premium plan)[10], and Starter and Pro prices rose 60–67% in late 2025[11].
MinglyLink's Position on Data Privacy
MinglyLink is a UK-registered company, subject to the UK GDPR (the UK’s version of the GDPR, retained after Brexit). Being a UK company says where we are established, not where data is hosted: we don’t publish a hosting region yet, so ask us if you need it for your records.
What this means in practice:
MinglyLink is subject to UK GDPR, which mirrors EU GDPR requirements. Ads come only from our own inventory, so no ad-network scripts load on your page. Your Impressum has its own field in page settings and appears in the page footer, and you link your privacy policy like any other link. There is one plan and it is free, so nothing privacy-relevant sits behind a paywall; the page keeps a small “Powered by MinglyLink” footer line, and custom domains are not available yet. The same free page also lets you sell digital products straight from your bio, so privacy and income live on one URL.
We want to be honest about what we're NOT: we're not a German company, and we don't publish a server region yet. If you need hosting specifically in the EU (Germany in particular), tools like Zeeg and Wonderlink are built for that. MinglyLink’s strengths are on the page itself: no cookies, no third-party trackers and an Impressum field — not EU hosting.
What Privacy-First Creators Actually Look For
When privacy-conscious users compare tools in forums, three phrases come up again and again — treat them as your evaluation checklist: "no tracking cookies" on the public page (so visitors never need a consent banner), "IP addresses not stored" or only processed transiently, and "hosted in the EU" (or a jurisdiction with an EU adequacy decision, like the UK). Our own answers: no cookies and no third-party scripts on public pages; IP addresses are stored with first-party click and visit counts for fraud prevention; hosting region not yet published. EU-hosted specialists win on the third point.
Alternatives If You Need EU Hosting
We're not the only option, and we'd rather you pick the right tool than pick us for the wrong reasons.
Zeeg (zeeg.me) — German company, data hosted exclusively on European servers. Combines link-in-bio with appointment scheduling. If your primary concern is data staying in the EU, Zeeg is the strictest option. Free plan available.
Wonderlink — German company backed by IT-Recht Kanzlei (a well-known German legal firm). Designed specifically to address DSGVO compliance for link-in-bio use. Hosted on German servers. The interface is currently German-only, which limits it for international use.
Self-hosted solution — If you have technical skills, building your own link page on your own hosting gives you complete control over data processing. No third-party data transfers, no cookie consent issues, no dependency on any tool's privacy practices. The downside: you build and maintain everything yourself.
How to Decide
Here's a practical framework:
Your audience is primarily in Germany and compliance is strict (legal, medical, finance): Use Zeeg or Wonderlink — EU-hosted, purpose-built for DSGVO.
Your audience is European but you're not in a high-compliance industry: MinglyLink (a UK company under UK GDPR, with no cookies or third-party trackers on bio pages) is a reasonable choice; ask us about hosting if you need it for your records. Fill in the Impressum field and link your privacy policy on your page.
Your audience is global and GDPR is a concern but not the primary one: Linktree with its DPA, SCCs and consent banner is legally defensible; keep the transfer point and the pixels you add yourself in mind, and put your Impressum link at the top if you have German visitors. Our full tool comparison covers the tradeoffs in detail.
You want maximum data control: Self-host. Nothing else gives you this.