Privacy Policy

Flippto lets you share links with your own preview images. We only process the data needed for that: no advertising, no third-party trackers, no tracking cookies. Everything runs on our own server in the EU, including fonts, statistics and image checks.

1. Controller

sagmeister clemens – experience design
Clemens Sagmeister, MSc
A. Baumgartner Str. 44/C4/1/3
1230 Vienna, Austria
Email: info@flippto.com

This policy applies to flippto.com and the short-link domain flipp.to.

2. Hosting and server log files

Flippto is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Finland (EU). We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

When you open a page or a Flipp, our server automatically processes technical data: IP address, date and time, requested address (URL), referring website, browser and operating system (user agent) and HTTP status. This is necessary to deliver the service and to keep it secure, for example against abuse and attacks.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the service). Log files are deleted after 14 days at the latest, unless they are needed to investigate a specific security incident.

3. Cookies and storage in your browser

We only set cookies that are strictly necessary for functions you use (§ 165 (3) Austrian Telecommunications Act 2021); they need no consent:

• ft_session – keeps you signed in after you sign in (30 days, or until you sign out).
• ft_owner – a random code that marks Flipps you created without an account as yours, so you can find and manage them in this browser and take them over into an account (1 year).

When you choose a view (grid or cards) or a sort order, your browser remembers this choice in its local storage (ft_view, ft_sort); it is not sent to us. We do not use cookies or similar technologies for statistics, advertising or tracking, so there is no cookie banner. You can block or delete cookies in your browser settings; you then cannot stay signed in.

4. Creating Flipps

When you create a Flipp, we store the link you entered, its title, the preview image you designed, the short code and the time. To show you the original preview, our server loads the page behind the link and reads its title and image; the website sees our server, not you.

Without an account you can create a limited number of Flipps per month. To count them and to prevent abuse, we use the ft_owner cookie and a code derived from IP address and browser that is kept only in the server's memory for up to 30 days and is never written to disk; for the hourly limit we use a visitor code that changes every day. No IP address is stored. An invisible bot check (ALTCHA) runs in your browser; it is a small calculation and sends nothing to third parties.

Images: images you upload are re-encoded on our server, which removes metadata such as camera details and GPS location. Your uploads are stored in your image library until you delete them or your account. The cut-out tool runs entirely in your browser; the image does not leave your device for this. When you add a meme, the caption text you type is sent from our server to memegen.link (an open-source meme service), which draws the text onto the picture; your IP address is not passed on.

Image check: to keep explicit content off Flippto, every preview image is checked automatically on our own server (NSFWJS); nothing is sent to third parties. Images that are flagged or reported are shown pixelated until we have reviewed them.

Safety check of destinations: before a link is flipped and when a Flipp is opened, we check whether its destination is known for phishing, scams or malware. We compare the domain with our own blocklist and ask the DNS resolver of Quad9 (Quad9 Foundation, Zurich, Switzerland; Switzerland has an adequacy decision of the European Commission) whether the domain is known to be harmful. Only the domain name of the destination is sent, no data about you. Links to harmful destinations are refused or paused until we have checked them.

Preview checker: the address you enter in the preview checker is loaded by our server together with its preview image; the result is shown to you and not stored. The checked website sees our server, not you.

Reports: if you report a Flipp, we store the reason, your optional note, the time and the daily visitor code described above (to prevent duplicate reports). Reports are only seen by us.

Visibility: a Flipp is public by nature: anyone who receives or finds its link sees the preview image and title and can open the target. On a public profile, your Flipps and collections are listed there too.

Legal basis: Art. 6 (1) (b) GDPR (providing the service you requested) and Art. 6 (1) (f) GDPR (preventing abuse and illegal content).

5. Your account

For an account we process your email address and, if you set one, a password (stored only as a secure hash). You can also sign in with a one-time link sent by email; only a hash of these links is stored. Optionally you add a nickname, username, bio, profile picture, banner and profile preview image, and you can follow people, create collections and receive notifications (for example when someone shares one of your Flipps).

Your profile is private until you switch it on in the settings. A public profile shows your nickname, username, bio, pictures, public Flipps and collections and, unless you turn “Showing stats” off, your numbers and followers.

We send sign-in, confirmation and notification emails through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), which processes your email address and the content of the email on our behalf and on servers in the EU (Art. 28 GDPR). Brevo technically records whether an email is opened or a link in it is clicked; we have set this to anonymous, so these events are only counted in total and are not linked to your email address.

Legal basis: Art. 6 (1) (b) GDPR. You can change your data at any time in the settings and delete your account there (see section 10).

6. Statistics for Flipps

When a Flipp is opened, shared or passed on, we record the time, the type of device (mobile, tablet, desktop) and the visitor code described in section 4, which changes every day and cannot be traced back to a person. No IP addresses are stored. From this, the owner sees how often a Flipp was viewed and by how many people. These records are kept as long as the Flipp exists.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing simple statistics to the owner).

7. Web analytics with Umami

To understand how Flippto is used and to improve it, we use Umami, an open-source analytics tool that we host ourselves (stats.flippto.com). No data is passed on to third parties.

Umami works without cookies and stores nothing on your device. Your IP address is only used briefly to determine the country and to create an anonymous visitor identifier using a regularly changing random value; the IP address itself is not stored. Recorded data: page visited (without parameters), referring website, browser, operating system, device type, screen size, language and country, as well as simple events such as “Create new” clicked. This data does not allow us to identify you.

Legal basis: Art. 6 (1) (f) GDPR. If your browser sends a “Do Not Track” signal, no statistics are recorded. Statistics data is deleted after 24 months.

8. “Notify me” for Pro

If you ask to be notified when Pro launches, we store your account or the email address you enter and send you one email when Pro is available. Legal basis: Art. 6 (1) (a) GDPR (consent). You can withdraw it at any time by email; the entry is deleted after the notification has been sent.

9. Contact by email

If you contact us by email, we process your email address and your message to answer your enquiry (Art. 6 (1) (b) and (f) GDPR). We keep the correspondence as long as necessary and as required by statutory retention obligations. Our mailbox is provided by Host Europe GmbH (Cologne, Germany) using Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin); a transfer of data to the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR).

10. Retention and deletion

• Flipps that nobody has opened or shared yet can be deleted completely in your profile. Flipps that have already been shared can be removed from your profile; their link keeps working for the people you sent it to.
• If you delete your account, we delete your account data, nickname, profile picture, banner, profile preview image, image library, follows, collections and notifications. Flipps you have shared keep working under their link but are no longer connected to you.
• Server log files: 14 days. Umami statistics: 24 months. Flipp statistics: as long as the Flipp exists.

11. Recipients

We do not sell your data and do not use it for advertising or profiling. Data is only processed by the providers named here (hosting at Hetzner, email sending via Brevo, mailbox at Host Europe) on our behalf, or passed on where we are legally obliged to, for example to authorities.

12. Security and automated checks

Connections to Flippto are encrypted (HTTPS), passwords are only stored as a secure hash, and only we have access to the admin area. Image checks and the safety check of destinations run automatically; they only pixelate an image or pause a link until a person has looked at it. We do not make automated decisions with legal or similarly significant effects within the meaning of Art. 22 GDPR.

13. Other tools on this domain (Visa Calculator)

For a transitional period, flippto.com also hosts free tools such as the Visa Calculator. They will move to their own website; this section will then be removed.

In the browser: data you enter there (for example travel dates and countries) is stored only locally in your browser (local storage) and is not transmitted to us. You can delete it at any time via your browser settings. If you use the share function, this data is included in the link; whoever opens the link transmits it to our server as part of the requested address (section 2). Storing this data is strictly necessary for the function you requested (§ 165 (3) Austrian Telecommunications Act 2021).

Connectors for AI assistants (MCP): the Visa Calculator can also be used in AI assistants such as Claude or ChatGPT via our MCP server at mcp.flippto.com. Legal basis: Art. 6 (1) (b) GDPR. What your assistant does with your conversation is governed by the privacy policy of its provider.

• Data we receive: only what your assistant sends for the calculation: travel dates (entry and exit), optionally countries and the language of the result link, plus technical connection data (IP address, usually that of the assistant provider, date and time, requested address). We do not request or receive your conversation history, your name, account data, precise location or any sensitive data.
• Purpose: calculating the Schengen 90/180-day result and returning it to your assistant; technical data is used to deliver the service and keep it secure; anonymous usage events (for example “result card shown”, number of stays, language, without dates, countries or IP addresses) help us improve the tools.
• Recipients: nobody. The data is processed on our own server at Hetzner (section 2). We do not sell or share it and do not use it for advertising or profiling.
• Retention: request content is discarded as soon as the result has been returned; server log files after 14 days at the latest; anonymous usage events after 24 months.
• Your controls: you decide which dates you give your assistant; you can disconnect the connector at any time in your assistant's settings; no account is needed.

14. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object to processing based on legitimate interests (Art. 21) and to withdraw consent at any time (Art. 7 (3)). To exercise your rights, email info@flippto.com.

You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

15. Changes

We update this privacy policy when Flippto changes, for example when Pro launches. The current version is always available on this page.

Last updated: 19 October 2026