This notice explains how Adam Hemmert handles personal data in connection with Kickflip (the "Service"). This page is maintained by Adam Hemmert and describes our own practices.
Who is responsible for your data
Adam Hemmert is the data controller for personal data processed through the Service. You can reach us at support@useflipper.dev. Where Paddle acts as Merchant of Record for a purchase, Paddle is a separate controller for the payment data it collects.
What we collect and why
- Account details (email address, hashed password, or the basic profile from a Google sign-in) — to create and secure your account and let you sign back in. Legal basis: performance of our contract with you.
- Calculator inputs (marketplace, item cost, shipping, sale price, listing links and ZIP code you enter for a tax lookup) — to produce your results. These are processed to run the calculation; we do not build a profile of the items you research. Legal basis: performance of our contract with you.
- Usage counts and a device identifier (a random cookie value and a salted, irreversible hash of your IP address) — to enforce the free-tier monthly calculation limit and to prevent abuse of it. We store the hash, not your IP address. Legal basis: our legitimate interest in operating a fair free tier.
- Subscription records (plan, status, renewal date, and the identifiers Paddle assigns to your subscription and customer record) — to give you the access you paid for. We do not receive or store your card number. Legal basis: performance of our contract with you.
- Support messages you send us — to answer you. Legal basis: legitimate interest in supporting our users.
- Technical and advertising data (browser type, device type, approximate region, pages viewed) — to keep the Service secure and to serve advertising on the free tier. Legal basis: legitimate interest in security, and consent where required for advertising cookies.
Who we share data with
- Hosting and database providers that run the Service and store account and usage records on our behalf.
- Paddle.com, our reseller and Merchant of Record, for the sale of the Pro subscription, subscription management, payments, tax compliance and invoicing.
- Google, for optional Google sign-in and for advertising served on the free tier.
- Listing-retrieval and tax-lookup providers, when you paste a listing link or request a local sales tax rate — the link or ZIP code is passed on to fulfil that request.
- Professional advisers (legal, accounting) and authorities, where required by law.
We do not sell your personal data.
Cookies
We use essential cookies to keep you signed in and to hold the anonymous device identifier used for the free-tier limit — the Service cannot work without these. We also use advertising cookies served by Google on the free tier. You can manage or clear cookies in your browser settings, and control Google ad personalisation at adssettings.google.com. Clearing the essential cookie will reset your free-tier device identifier.
How long we keep it
Account and subscription records are kept for as long as your account is active, and for up to six years afterwards where we need them for tax and accounting purposes. Monthly usage counters and anonymous device hashes are kept for up to 13 months so that limits can reset correctly, then deleted. Support messages are kept for up to two years. Data we no longer need is deleted or anonymised.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where processing is based on consent. To exercise any of these, email support@useflipper.dev. We aim to respond within one month. If you are in the UK or EEA and are unhappy with our response, you may complain to your local data protection supervisory authority.
International transfers
Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, row-level access controls on our database, hashed passwords, and restricted administrative access. No system can be guaranteed completely secure, so we also keep only the data we actually need.
Changes and contact
We may update this notice; the "last updated" date above will change. Questions or requests: Adam Hemmert, support@useflipper.dev.