Privacy

The short version

There is no advertising on this site, no analytics, and no third-party scripts of any kind. Nothing measures you. The typeface is served from this site rather than from anybody else’s, so loading a page here does not tell another company you were here.

If you only listen, we store nothing about you. The site does not record what you played, how far you got, or what you clicked. The rest of this page is about what happens when you send us something — music, a picture, an email address, or a complaint.

If you send music

We keep what you sent and everything you said about it: the audio, the title, your artist name, where you are, your links, the story and the quote, the lyrics and any translation, the photographs, who to credit for them, and the four rights statements you confirmed. Most of it is on the record page, because that is what it is for, and your name, your photographs and a few seconds of your track are in the day’s video of the record — see Who else handles it, below.

We also keep your email address, whether we accepted or declined it and why, and — while the form is open and unsent — the IP address the draft was started from. That last one is there to stop the form being used a thousand times an hour by something that is not a person.

If you send a picture

The picture, its dimensions, the sentence you wrote about what it shows, your name, where you are, your links, your email address, the IP address it was sent from, and whether you said it can be in the day’s video. If we decide not to use it we delete the file rather than leaving a stranger’s work sitting in a bucket.

If you make an account

Your email address, the name you chose to show, and when you were last here. Signing in sends a one-time link to that address; we keep the link’s record until it is used or expires, with the IP address it was asked for from, so that somebody cannot ask for a thousand of them.

A session — the thing that keeps you signed in — records when it was made, when it expires, and the browser it was made from. Notes you pin to a track are attached to your account and stay on the record after the room closes, which is the point of them.

If you get the daily record by email

Your email address, where you subscribed from, when you confirmed, and when you left if you leave. There are no tracking pixels in the letters, so we do not know whether you opened one and cannot find out. Every letter has an unsubscribe link, it works immediately, and it does not ask you why.

If you write to us about somebody's rights

We keep your name, your email address and what you told us, along with what we did about it and when. We have to: it is the record of why something came off the site. See Rights & takedowns.

Cookies

Four, all set by this site, none of them shared with anybody and none of them following you anywhere:

• flip_sessionKeeps you signed in. Set when you use a sign-in link, and cleared when you sign out.
• flip-themeWhich of the grounds you chose to read the site on. It is a preference and nothing else.
• flip_deskOnly ever set for the people who put the records together, and only after a passphrase.
• desk_prefsHow somebody at that desk left their panels arranged. Also staff only.

There is no consent banner because there is nothing to consent to: two of these exist only if you sign in, and the other is a preference you set yourself.

What this site does not do

• No advertisingNone, ever. It is not a thing we are holding off on.
• No analyticsNo Google Analytics, no product analytics, no session recording, nothing counting visits.
• No third-party scriptsNothing on these pages is fetched from another company at the moment you read them, fonts included.
• No tracking pixels in the mailWhich rules out ever knowing an open rate, and we decided that was worth it.
• No redirects on your linksAn artist's links point straight at the artist, unshortened, with nothing in the middle counting who pressed.
• Nothing sold, and nothing trained onNot your music, not your picture, not your email address, not what anybody listened to.

Who else handles it

Four companies, each doing one job, none of them given anything for their own purposes:

• VercelServes the site. Sees the requests, as any host does.
• NeonThe database: everything described above that is not a file.
• Cloudflare R2The files — audio, pictures, sleeves.
• ResendSends the email: the daily record, sign-in links, and the confirmations.

And the day’s video, which is different. A short video of each record goes on The Flip’s own accounts on Instagram, TikTok and YouTube: every artist’s name and photographs, a few seconds of every track, and the sleeve if whoever drew it said yes. What is in it is given to Meta, TikTok and Google on their terms, not ours — they show advertising around it, and some of them train their models on public posts. It is the one place anything of yours goes where the promises on this page cannot follow it, which is why the Terms say so before you send anything.

How long it is kept

A published record is meant to stay up: that is the promise the whole site is built on, and it applies to the music, the picture, the words and the notes. Anything you ask us to take down comes down within seven days, and a picture we decline is deleted rather than kept.

Not settled yetThe rest needs deciding and then writing here: how long a declined submission’s audio is kept, how long the IP addresses on drafts and offers are kept, how long an expired sign-in link or a dead session stays in the table, and what happens to all of it when somebody closes their account.

What you can ask for

Write to support@theflip.me and you can have a copy of what we hold about you, have it corrected, or have it deleted. If you send from the address it is filed under, that is the whole of what we need to know it is you.

The person responsible for all of it is one individual in Argentina — there is no company, and the Terms explain that. Ask in the same email and you will be told who that is.

Deleting an account does not by itself unpublish a record that has aired — that is a takedown, it is free, and it takes seven days at the outside. You can ask for both in the same email.

Not settled yetBeing a personal venture rather than a company changes nothing about what is owed to an artist in Lisbon or Kraków: European data protection follows the person whose data it is, not the size of who holds it. Two things still have to be written here properly — the lawful basis for each kind of data, and whether a site this small run from outside the EU needs a representative inside it. Both are questions for somebody who does this for a living, and neither is waiting on who The Flip is any more.

If this changes

This page describes what the site does today. If the site starts collecting something it does not collect today, this page changes before that starts, not after — the same commitment the illustrators’ page makes about money. The date at the top is when the words last changed.