Privacy policy

• Your email address. It's how you sign in: we email you a link, and there's no password.
• A cookie that keeps you signed in for up to 7 days, set only for people who sign in. While you connect Mailchimp or Kit to a page, a second cookie holds that request for up to 10 minutes.
• Your sign-in history: when you signed in, your browser, your operating system and your approximate city. We keep it for a year so you can spot a sign-in that wasn't you. We don't keep your IP address.
• What you put on your page: its name, address, bio, links, images, colours and font.
• Your settings, such as your display name and whether you get the monthly summary email.
• A record of your sign-up, of asking for approval, and of Fheba Design's approval or decline, with any reason given.
• If you ask for the verified tick: who asked and when, until Fheba Design approves or declines it.
• A history of changes to each page: who made each change, when, and what it was (for example a link's old and new address). The page's owner and Managers can see it on Pro. We keep it for 12 months.
• If the page has Pro: its Stripe customer and subscription IDs, whether the plan is monthly or yearly, its status, and when it renews or ends.
• If you connect Mailchimp or Kit to a page: the account's name, the audience or form you chose, and the access it gave flipl.ink, stored encrypted. Disconnecting deletes them.

We don't set cookies for visitors, except on a private page: once you enter its passcode, a necessary cookie remembers that you entered it, so you aren't asked again for as long as the page chooses, at most a year. It holds nothing else about you. We don't store IP addresses. We count daily totals of visits and clicks for each page by:

• where the visit came from, such as Instagram or a QR code
• country
• type of device: phone, tablet or computer

These are totals, like “12 visits from Instagram on phones in Canada today”. They can't be traced back to you.

On flipl.ink's own pages (the home page, pricing, the roadmap and sign-up) we'd like to use Google Analytics to see how people find us. It runs only if you choose Allow in the bar at the bottom of the page, and we remember your choice in your browser. If you allow it, Google Analytics sets cookies and Google receives your IP address and details such as your browser, device and the pages you looked at. You can change your mind any time with Analytics settings at the bottom of the home page. Google Analytics never runs on the pages people make on flipl.ink.

Some pages have an email sign-up block. When you sign up, your email address (and your first name, if the block asks for it) goes straight to the page owner's Mailchimp or Kit account, and their privacy policy applies from there. flipl.ink only holds it if delivery fails: then it's kept encrypted while we try again, for at most 3 days, and then deleted. flipl.ink keeps only daily counts of sign-ups, never the addresses.

Some pages have a lead form. When you send one, flipl.ink keeps what you typed: your name and email address, and your phone number and message if the form asks for them. It goes to the page's owner and Managers, by email and in the page's Leads inbox on flipl.ink, so they can reply. We keep it for up to 12 months, or until they delete it. The page owner is responsible for how they use it. flipl.ink also keeps daily counts of enquiries, which can't be traced back to you.

• Cloudflare hosts flipl.ink, its database and its images, and runs the “check you're human” box on the sign-up form (Turnstile).
• Resend sends our emails.
• Google Analytics (by Google), only on flipl.ink's own pages and only if you allow it.
• Stripe handles payments for Pro. You type your card details into Stripe's own page: flipl.ink never sees or stores card numbers. Stripe keeps the billing name, email and address it asks for, and records of payments.
• Mailchimp (Intuit) or Kit receive the addresses visitors give a page's sign-up block, in that page owner's own account.
• Gravatar (by Automattic) supplies profile pictures. When you're signed in, your browser asks Gravatar for your picture using a scrambled form (a hash) of your email address. So Gravatar sees that request and your IP address.

Each handles the information it needs under its own privacy policy. We don't sell your information or use it for advertising.

Sign-in links, the link that confirms a new page, a note when your page is approved or declined, and, if you edit a page, a monthly summary of its visits and clicks. If the page address you ask for is already being set up by someone else, we email you to say so and keep nothing. If you sign up with an email address that already has a page, we email you “You already have a flipl.ink page”. You can turn the summary off in Settings or from the link in any summary. If a page has a lead form, we email each enquiry to that page's owner and Managers, and replying to that email goes to the person who sent it.

• Your page and its totals: until the page is removed. A page that is declined is deleted straight away, with its links, images and totals. We keep the record of the decision, though: the address, your email, any reason given, who decided, and when.
• A page's Stripe IDs and plan details: while the page exists. Stripe keeps its own payment records for as long as the law requires.
• Records of who was added to or removed from a page, and of which emails were sent, are kept.
• Sign-in history: one year.
• A page's history of changes: 12 months.
• A sign-up that was never confirmed: it expires after an hour and is cleared out later.
• A sign-up that couldn't be delivered: at most 3 days, encrypted.
• An enquiry sent through a lead form: up to 12 months, or until the page's owner or a Manager deletes it.

You can ask to see what we keep about you, to correct it, or to delete it, by getting in touch through fhebadesign.com. Deleting your sign-in removes your access to any page you edit.

If we change this policy, we'll update the date at the top. See also our Terms.