Privacy policy

Who we are

FlipScroll is provided by [legal entity], [address]. You can reach us about privacy at [contact email].

What we store, and why

We store only what the service needs to work:

• Your account: your email address, to sign you in and send sign-up and password-reset emails, and your password, which our sign-in provider stores only as a one-way hash that cannot be turned back into the password.
• The accounts you import: for each, the platform (Instagram or X), the account's handle and the date of the export it holds.
• Your posts and comments from those exports: the text, the date, whether it is a post or a comment, a link to it (X only; Instagram exports contain no links) and a few small details: whether it is a repost or part of a thread, whether it had a photo or video, its language, and the public handle of the account you replied to or commented on, as it appears in your export. These are what makes searching your history possible.
• What you do with them: the items you flag for review, with the date you flagged them, and the history of your imports and refreshes (when, the export file's name, and how many items were added, changed or removed).
• Records kept to limit how often things can run: a record of each import you start, identifying the account only by a one-way hash of its platform and handle, and a record of when you started each data export. Both are kept for up to 24 hours.
• Sign-in records: your active sessions and a log of sign-in events (such as signing up, logging in and resetting your password) with the IP address they came from, kept by our sign-in provider for security.

What we never collect

• Your export file itself. It is read on your device, in your browser, and never uploaded; only the items described above are sent to us.
• Photos, videos, direct messages, likes, followers or contacts from your export.
• The other personal details in your export's account files. FlipScroll reads only the username; for example, the email address, phone number and date of birth in an Instagram export's account file are never read.
• Anything about you from other sources.

FlipScroll shows no ads, uses no third-party trackers, and never sells your data. No analytics are used today.

Where your data is kept, and who processes it

• Supabase stores the database and runs sign-in, in [hosting region].
• Vercel hosts the website and processes your requests to it.
• [email provider] sends the sign-up confirmation and password-reset emails.

Access to your data is restricted at the database level to your own account, and the database is encrypted on disk. Your posts and comments are not encrypted separately, because they must be searchable: they are readable by the service. We access them only [to run and support the service, and where the law requires it].

The website's own logs record only error codes and counts, never your posts or comments. Our hosting provider keeps logs of requests to the website for [Vercel log retention].

How long we keep it

• Your account and imported data: until you delete them. Refreshing an account replaces its posts and comments with those of the newer export.
• The records of imports and data exports: up to 24 hours, and removed with your account.
• Sign-in records: until you delete your account. Our sign-in provider also keeps its own logs of sign-in events, outside our database, for [Supabase Auth log retention].
• Backups: deleted data stays in our database backups until they expire, after [backup retention for the chosen plan]. It cannot be removed from a backup that has already been made.

Your rights, and how to use them

• Get a copy of your data: Settings, “Export my data”, downloads everything we store about you as JSON and CSV files with an explanation.
• Delete one imported account: on the Imports page. Its posts, comments, flags and import history are permanently deleted.
• Delete your whole account: Settings, “Delete my account”. Everything above is permanently deleted at once, apart from what remains in backups until they expire. A device that was still signed in keeps a sign-in token for up to one hour, but can no longer read or change anything.
• Correct your data: refresh an imported account with a newer export.
• Anything else, such as objecting to or restricting how we use your data: write to [contact email]. You can also complain to [supervisory authority].

See also the terms.

Cookies

FlipScroll uses only cookies that are strictly necessary to sign you in and keep you signed in. It uses no advertising, analytics or preference cookies, and stores nothing else on your device.

• sb-…-auth-token (sometimes split into parts ending in .0, .1): your session, while you are signed in. Removed when you log out or delete your account.
• flipscroll-recovery: set for one hour after you open a password-reset link, and only sent to the page where you choose a new password.

Children

FlipScroll is not intended for anyone under [minimum age].

Changes to this policy

If we change this policy, we will update the date above and [how users will be told of significant changes].