Privacy
This is a short notice for a small product. It says what reflip stores and why, in the order the things actually happen.
When you open a link
Opening a flip stores a row saying a link was opened, which flip it was, and roughly what kind of device you are on — "ios", "android", "mac", "windows" or "other". Not a full browser fingerprint: just enough to tell whether the instrument works on the phones people actually have.
We put a random id in your browser's storage the first time you visit. It is not connected to a name or an email, and it exists so that "someone opened a link, played it, recorded something and posted it" reads as one story instead of four unrelated ones. You can clear it by clearing site data, and nothing breaks.
We do not store your IP address. We store a salted SHA-256 hash of it, which is a fixed-length value the address cannot be read back out of. It exists for exactly one reason: to stop one machine flooding the tables that everything else is measured from. The salt is fixed for the deployment, so the same visitor produces the same hash — which is what makes the limit work at all, and which we would rather state than leave you to infer.
When you make something
Choosing a video creates an anonymous account for you, with no email and no password — it is how what you make stays yours across a reload. The video is processed on your device; what is uploaded is the playable instrument built from it, its audio, ten still frames, and a short preview clip. The original file is not uploaded.
A saved kit is private until you post it. Posted flips are public: anyone with the link can play them, and your handle appears on the page.
When you sign in
Signing in attaches a provider to the anonymous account you already had, so nothing you made is lost. We receive your email address from the provider and store it as part of your account. We never see a password.
The handle you choose is public, because a flip has an author. Nothing else about your account is.
Email, if you give us one
The share page offers to tell you when there is an app. If you enter an email there, we store it, with the flip you were looking at. It is used for that and nothing else.
Our home page has two sign-ups: one to hear when reflip opens to everyone, and one to ask for an invite to the iPhone beta through Apple's TestFlight. We store your email, which form you used and, if you choose to tell us, which version of iOS you run. We use them to send you that one update or that invite, and to know which phones to test on. Ask us and we will delete them.
What we do not do
- No advertising, and no advertising or analytics trackers from other companies.
- We do not sell anything about you.
- We do not build a profile of you across other websites.
Where it lives
Rows are in a Postgres database hosted by Supabase in the United States. Media is in Cloudflare R2. Media files are served from unguessable addresses rather than being access-checked on each request — so a link to a file works for anyone who has that link, and the link is not published anywhere until you post.
Removing things
You can ask us to remove a flip or your whole account. Removing a video also stops every re-flip of it from playing, because a re-flip references your video rather than copying it. Analytics rows are kept, with the connection to your account removed — they are counts of what happened, not a record of you.
Asking us
Use the report button on any flip, or write to us. For anything about your own data, say what you want removed and from which flip.