Privacy Policy

Last updated: March 2026 · Operated by: Max Götte, Duisburg, Germany

1. Data Controller

Max Götte
Duisburg, Germany
Email: designedbygotti@gmail.com

2. Data We Collect

Without an account: We do not collect any personal data. All data (flip tracking, watchlist, settings) is stored locally in your browser (localStorage).

When you register/log in:

• Email address (email login) or Google profile data (name, email via Google login)
• Authentication is handled by Firebase Authentication (Google Ireland Ltd.). More info: Firebase Privacy

When using the Chrome Extension:

• GE transaction data (item, quantity, price, timestamp) from RuneLite.net
• No access to RuneScape passwords, inventory, bank, or other game data

3. Purpose of Processing

• Providing flip tracking and GE analysis features
• Account management and authentication
• Synchronization of GE trades between browser and app
• Analytics to improve the service (with consent)
• Marketing and personalized content (with consent)

4. Legal Basis

Processing is based on Art. 6(1)(a) GDPR (consent for analytics/marketing), Art. 6(1)(b) GDPR (contract fulfillment for providing the service), and Art. 6(1)(f) GDPR (legitimate interest for security and fraud prevention).

5. Third-Party Services

• Firebase Authentication (Google Ireland Ltd.) — User authentication
• Google Analytics (GA4) — Usage analytics with anonymized IP (with consent)
• Google Ads — Conversion tracking and retargeting (with consent)
• Vercel Inc. (USA) — Hosting and serverless functions
• Vercel Analytics / Speed Insights — Performance monitoring
• OSRS Wiki Real-Time Prices API — Public market prices (no personal data)

Data transfers to the USA are based on the EU-US Data Privacy Framework.

6. Cookies and Tracking

Flippo.club uses cookies and similar technologies. On your first visit, you can choose which categories to allow. You can change your preferences anytime via the "Cookie Settings" link in the footer.

Necessary (always active):

• localStorage — Local storage of app data
• Firebase Auth Session — Login session token

Analytics (opt-in):

• Google Analytics (GA4) — Usage analysis with anonymized IP
• Firebase Analytics — App usage statistics
• Vercel Analytics / Speed Insights — Performance measurement

Marketing (opt-in):

• Google Ads Conversion Tracking — Ad effectiveness measurement
• Retargeting — Displaying relevant ads based on usage

Personalization (opt-in):

• User profiles — Personas for personalized flip recommendations
• Interest-based content — Customized item and feature display

All tracking categories are disabled by default and only activated after your explicit consent (opt-in). You can revoke your consent at any time via "Cookie Settings" in the footer.

7. Your Rights

Under the GDPR, you have the right to:

• Access your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority

To exercise your rights: designedbygotti@gmail.com

8. Data Deletion

You can delete all locally stored data at any time via Settings → Clear All Data. Your Firebase Auth account can be removed through your Google Account settings.

9. Chrome Extension

The Flippo Chrome Extension only reads Grand Exchange trade history from RuneLite.net and sends it to the Flippo.club API. It does not collect personal information, passwords, browsing history, or any data beyond GE transactions. You can uninstall the extension at any time to stop all data collection.

10. Changes

We reserve the right to update this privacy policy as needed. The current version is always available on this page.

Deutsche Version: Datenschutzerklärung

← Back to Flippo