Privacy Policy

Welcome to FASTFLIPFLOP (“FASTFLIPFLOP”, “we”, “our”, or “us”). This Privacy Policy explains how we collect, use, store, share, and protect information when you use our website, applications, and related services (collectively, the “Services”).

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

We may collect the following categories of information:

Account Information

When you create an account, we may collect information such as:

• Name or username
• Email address
• Password (stored in encrypted or hashed form)
• Profile information you choose to provide

If you sign in with Google, we receive your name, email address, and profile picture from your Google account.

Content You Provide

Your practice activity (such as questions you mark as solved or flagged, and the days you practice), sketches you save, questions you submit to us, and messages you send through our contact forms.

Usage Information

We automatically collect certain information when you use the Services, including:

• IP address
• Browser type
• Operating system
• Device information
• Pages visited
• Time spent on the Services
• Actions performed within the Services
• Log files and diagnostic information

Payment Information

If you purchase Premium access, your order is processed by our online reseller Paddle.com, which acts as the Merchant of Record and collects your payment details directly. We do not receive or store your payment card information. We receive a record of the purchase (such as the transaction reference, amount, and date) so we can provide your Premium access. Paddle's handling of your data is described in its own privacy policy.

We use essential cookies and similar technologies to keep you signed in, remember your preferences, and protect the Services (for example, bot protection on sign-in and sign-up forms). Our website analytics does not use cookies.

You may disable cookies through your browser settings, although some features of the Services may not function properly.

We use your information to:

• Provide and maintain the Services
• Create and manage user accounts
• Process purchases and provide Premium access
• Authenticate users
• Respond to support requests
• Improve our Services
• Monitor performance and security
• Detect fraud or abuse, including account sharing
• Comply with legal obligations
• Communicate important updates regarding your account or the Services

We do not sell your personal information.

We may share information in the following situations:

Service Providers

We may share information with trusted third-party providers that assist us with:

• Cloud hosting
• Payment processing
• Website analytics
• Email delivery
• Customer support
• Security services

Our main service providers are:

• Supabase — database and user accounts (account details, practice progress, saved sketches).
• Vercel — website hosting, and privacy-friendly website analytics (Vercel Web Analytics, which does not use cookies).
• Paddle — payment processing, as Merchant of Record.
• Brevo — sending account emails (such as email confirmation and password reset) and forwarding messages you send us.
• Google — optional “Sign in with Google”, and our business email when you contact us.
• Cloudflare Turnstile — bot protection on sign-in and sign-up forms; it processes technical information about your browser and device to tell people from automated bots.

These providers may access information only as necessary to perform services on our behalf.

Legal Requirements

We may disclose information when required by law or when we reasonably believe disclosure is necessary to:

• Comply with legal obligations
• Respond to lawful requests from authorities
• Protect our legal rights
• Prevent fraud or illegal activity
• Protect the security of our Services and users

Business Transactions

If FASTFLIPFLOP is involved in a merger, acquisition, restructuring, investment, or sale of assets, your information may be transferred as part of that transaction in accordance with applicable law.

We implement reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction.

However, no system connected to the Internet can be guaranteed to be completely secure.

Although FASTFLIPFLOP is operated by a company registered in Israel, your information may be processed or stored in countries where our service providers operate.

Where required, we take appropriate measures to protect personal information during international transfers.

Our Services may contain links to third-party websites or integrate third-party services.

We are not responsible for the privacy practices or content of those third parties. We encourage users to review their respective privacy policies.

You may delete your FASTFLIPFLOP account at any time from your profile page, or ask our support team to do it for you. If you have active Premium access, you can delete your account once that access period ends.

Upon deletion:

• Your account is permanently removed right away.
• Certain information may be retained where required by law or for legitimate business purposes.
• Public content you have created may remain visible in an anonymized form where technically appropriate.
• Deleted accounts generally cannot be restored once permanently removed.

If you have pending payments or unresolved transactions, deletion may be delayed until these matters have been resolved. A record that a purchase took place may be kept after deletion where required for accounting, tax, or legal purposes.

After your account is deleted, we keep a minimal record — the email address the account used, and the dates it was created and deleted — for up to 24 months, to prevent fraud and abuse of the Services, to handle payment disputes, and to establish or defend legal claims. This record is not used for marketing. If the account was involved in a payment dispute (such as a chargeback) or was blocked for misuse, the record may be kept for as long as that matter remains relevant.

We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

Account activity. To detect account sharing and unauthorized access, we record sign-in activity for Premium accounts, such as session times, IP addresses, and device or browser information. This activity data is kept for up to 30 days and then deleted, unless it is needed to investigate a specific case of misuse.

Our Services are not directed toward children under the age required by applicable law to provide valid consent.

If we become aware that personal information has been collected from a child without appropriate consent, we will take reasonable steps to delete such information.

Depending on your location and applicable law, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict or object to certain processing
• Withdraw consent where applicable
• Receive a copy of your information where required by law

Requests may be submitted by contacting us using the information below.

We may update this Privacy Policy from time to time.

When material changes are made, we will update the “Last Updated” date and, where required by law, provide additional notice.

Your continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.

If you have any questions regarding this Privacy Policy or our privacy practices, please contact us at:

FASTFLIPFLOP
Email: support@fastflipflop.com