Privacy policy
Last updated 25 October 2026
xflippy (xflippy.com) is run by EngSiteTools, a business based in Perth, Western Australia (“we”). This page explains what we collect when you use xflippy, why, and who else handles it.
What we collect
- If you only look at charts: nothing that identifies you. We don’t use analytics, advertising or tracking cookies. Our host, Cloudflare, processes your IP address to deliver the site and protect it from abuse. We use it briefly to limit how many new company lookups one connection can make, and to count each connection’s view of a company only once a day, and we don’t store it. We keep a daily count of how often each company’s chart is opened, to show the most viewed companies under the search. The count holds nothing about who opened a chart.
- If you subscribe: Stripe handles the payment, sold through Link, Stripe’s checkout. We never see your full card number. Stripe shares with us your email address, name, billing country and address (needed to work out sales tax), and whether your subscription is active.
- If you sign up or sign in by email: we use your email address to send you a one-time link, which expires after 15 minutes. Signing up makes your account, which Stripe holds with your email address, so a subscription can be added to it later.
- If you sign in with Google: Google confirms your email address and tells it to us. We don’t get your Google password or anything else from your Google account.
- If you send a request (on the Requests page): your message, the company it’s about, and your email address if you give one, so we can look into it and reply. We keep requests for a year.
- If you email us: your message and email address.
Cookies
xflippy sets one cookie, xf_s, when you subscribe or sign in. It keeps you signed in for up to 60 days and holds only a signed reference to your subscription. xflippy sets no other cookies. Stripe’s checkout page sets its own.
How we use it
To give subscribers access, send sign-in links, answer your emails, and meet our legal and tax obligations. We don’t sell or rent personal information, and we don’t use it for advertising.
Who else handles it
- Stripe and Link: payments, tax, receipts, subscription management and payment support. See the Stripe privacy policy and Link privacy policy.
- Cloudflare: hosting the site, storing subscription status and sending sign-in emails. See the Cloudflare privacy policy.
- Google: signing you in, if you choose Continue with Google. See the Google privacy policy.
These companies may process information in the United States and other countries.
How long we keep it
- Subscription details: while you’re subscribed, and afterwards for as long as tax and accounting rules require.
- Sign-in links: 15 minutes.
- Emails you send us: as long as we need them to deal with what you asked.
Your choices and rights
You can ask to see, correct or delete the personal information we hold about you, or object to how we use it, by emailing contact@xflippy.com. Payment records that tax law requires us or Stripe to keep can’t be deleted early. Depending on where you live, for example Australia, the UK or the EU, you may also complain to your privacy regulator. In Australia that’s the Office of the Australian Information Commissioner.
Children
xflippy isn’t meant for anyone under 18.
Changes
If this policy changes, we’ll update this page and the date at the top. For significant changes, we’ll also email subscribers.