Skip to main content
FLAPSTV
01PRIVACY POLICY

Last updated: March 30, 2026

1. Introduction

Flaps.tv ("we", "us", or "our") operates a split-flap display management platform available at flaps.tv (the "Service").

This Privacy Policy explains what data we collect, how we use it, and your rights.

By using the Service, you agree to this policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Name (optional)
  • Email address
  • Password (stored as a salted bcrypt hash)
  • OAuth data (if you sign in with Google, we receive your name, email, and profile image)

2.2 Billing Information

Payments are processed by Stripe.

We store:

  • Stripe customer ID
  • Subscription ID
  • Plan and billing status

We do not store credit card numbers or banking details.

2.3 User Content

We store data you create and manage in the Service, including:

  • Display configurations (layout, size, themes, etc.)
  • Scene content (text, KPIs, schedules, widgets)
  • Data source URLs and cached responses
  • Templates and customizations

2.4 Device and Usage Data

We collect operational data required to run the Service:

  • Device heartbeats (online/offline status)
  • Pairing codes (temporary, short-lived)
  • Authentication tokens (JWTs stored client-side)

2.5 Analytics and Diagnostics

We use third-party tools to understand usage and improve reliability:

  • Google Analytics — usage analytics
  • PostHog — product usage and feature tracking

These tools may collect:

  • Device/browser information
  • IP address (short-lived or anonymized where possible)
  • Usage patterns and events

3. How We Use Information

We use your data to:

  • Provide and operate the Service
  • Authenticate users and manage accounts
  • Process payments and manage subscriptions
  • Send transactional emails (verification, password reset, billing)
  • Enforce plan limits and feature access
  • Monitor system performance and fix issues
  • Prevent abuse and ensure security
  • Improve the Service using aggregated or pseudonymized data

We do not sell or rent your personal data.

4. Legal Basis for Processing (EEA/UK)

If you are in the EEA or UK, we process data under:

  • Contract — to provide the Service
  • Legitimate interests — to improve, secure, and operate the Service
  • Consent — for optional features (e.g., OAuth login)
  • Legal obligation — where required by law

5. Data Source Content

If you connect external data sources:

  • We fetch and cache data to render your displays
  • We process this data only to operate the Service
  • We do not use it for advertising

You are responsible for ensuring you have rights to access and display that data.

6. Data Sharing and Third Parties

We share data only with trusted service providers necessary to operate the Service:

  • Stripe — payments and billing
  • Cloudflare — transactional emails, DNS, and network services
  • Hetzner — infrastructure and hosting
  • Google — authentication (OAuth)
  • Google Analytics — analytics
  • PostHog — product analytics and diagnostics

These providers process data according to their own privacy policies.

We do not share personal data for advertising or marketing purposes.

7. Data Retention

  • Active accounts — data retained while account is active
  • Deleted accounts — data deleted within 30 days
  • Verification tokens — expire automatically (24h email, 1h reset)
  • Pairing codes — expire within minutes
  • Billing records — retained by Stripe per legal requirements

8. Data Security

We implement reasonable security measures, including:

  • Password hashing (bcrypt)
  • HTTPS/TLS encryption
  • Restricted infrastructure access
  • Token-based authentication
  • Signed webhook verification

No system is completely secure, and we cannot guarantee absolute security.

In the event of a data breach, we will notify affected users as required by applicable law.

9. Cookies and Local Storage

We use essential cookies and local storage to:

  • Maintain authentication sessions
  • Ensure the Service functions correctly

We do not use third-party advertising cookies.

10. Your Rights

Depending on your location, you may have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your account and data
  • Export your data
  • Object to certain processing

To exercise your rights, contact: support@flaps.tv

We respond within 30 days.

California Privacy Rights (CCPA/CPRA)

California residents have the right to:

  • Know what personal data is collected
  • Request deletion or correction
  • Opt out of sale or sharing

We do not sell or share personal data.

11. Data Processing Roles

Flaps.tv acts as:

  • Data controller — for account, billing, and operational data
  • Data processor — for user-generated display content

For a Data Processing Agreement (DPA), contact us.

12. International Data Transfers

Your data may be processed in countries outside your own.

Where required, we rely on safeguards such as Standard Contractual Clauses (SCCs).

13. Children's Privacy

The Service is not intended for individuals under 18.

We do not knowingly collect data from children.

14. Business Transfers

If Flaps.tv is involved in a merger, acquisition, or asset sale, your data may be transferred.

We will notify you of any such change.

15. Changes to This Policy

We may update this Privacy Policy.

Material changes will be communicated via email or in-app notice.

16. Contact

For questions or requests: support@flaps.tv