Privacy Policy

Last updated: 29 May 2026

This Privacy Policy describes what personal information FlipClick collects, how we use it, and the choices you have. It applies to flipclick.co and flp.si (our short-link domain).

1. Information we collect

When you create an account or use the Service, we collect:

• Account data: your name, email address, and (if you sign in with Google) your Google account identifier and profile picture URL.
• Publisher data: the publication name, logo, theme, and any PDFs/images you upload as issues.
• Payment data: handled entirely by Stripe. We store only Stripe customer/subscription identifiers and basic state (active, period end). We never receive or store card numbers.
• Reader analytics: when someone views or clicks a hot-spot in your published issues, we record the event with a hashed visitor identifier (sha-256 of IP + user agent), not a personal identifier.
• Logs: a sha-256 hash of the requesting IP address is recorded on sign-in and key actions for security/audit purposes. Raw IP addresses are not stored.
• Sessions: an HTTP-only, same-site cookie is set when you sign in to keep you logged in. No third-party tracking cookies are used.

2. How we use it

• To deliver and operate the Service (host your PDFs, render the reader, generate share links, send invitations).
• To authenticate you (sign-in tokens, sessions).
• To process payments and apply your plan tier.
• To send transactional email (sign-in links, team invitations, billing receipts via Stripe).
• To protect the Service against abuse, fraud and unauthorised access.

We do not sell or rent your personal information. We do not use it for third-party advertising.

3. Third-party processors

FlipClick uses these vendors to operate:

• Stripe — payments.
• Google — optional Google sign-in (OAuth).
• Resend — transactional email.
• DreamHost — hosting and database.

4. International transfer

Some of these processors operate outside Australia (notably in the United States). Where we transfer your data internationally, we rely on the processor's own commitments to applicable data-protection standards.

5. Data retention

We retain account and content data for as long as your account is active. When you delete your account, your PDFs, issues, links and analytics are permanently removed. Audit log entries and minimal billing records may be retained for a reasonable period for legal, accounting and abuse-prevention purposes.

6. Your rights

You can access, correct, export or delete the personal information we hold about you. To exercise any of these rights, contact us through the Support page. Australian residents have rights under the Australian Privacy Act 1988 (Cth); visitors from the EU/UK may also have rights under the GDPR. We'll respond within a reasonable time.

7. Security

We use TLS in transit, secure session cookies, parameterised database queries, hashed IP/UA storage and CSP/HSTS response headers. No system is perfectly secure; we encourage you to use strong sign-in methods and report suspected incidents promptly via the Support page.

8. Children

FlipClick is not directed at children under 16. We do not knowingly collect personal information from anyone under that age.

9. Changes

We may update this Policy from time to time. Material changes will be notified by email or in-product.

10. Contact

Questions or privacy requests? Reach us via the Support page.