What FlipFirst keeps when you use the product.

Who we are

Calvin Christopher Kennedy (ABN 63 487 041 531) runs FlipFirst from Australia and is responsible for your personal information. Contact us about privacy at ajax@aquinus.net.

What you give us

If you join the early-access waitlist, we save your email address, the wording you agreed to and when you joined, so we can email you about launch and availability. Every launch email has an unsubscribe link. Joining does not create an account. We use that email only for launch and availability updates. The public product preview keeps listing details and sample calculations in your browser; it does not fetch a pasted listing URL or save those details.

Your account email and the watch rules you save, including the item, area, radius, included or excluded terms and optional maximum price.

What we use it for

To keep your watches across sessions, match listings to the right watch, send and track your alerts and, once you pay for a plan, match your payments to your account. We do not publish or sell your account details.

What a listing record contains

A listing record keeps the named source, original URL when available, asking price, location, observation time and the watch criteria version it matched. FlipFirst does not treat an asking price as a completed sale or profit.

Who else handles it

We use a few providers to run FlipFirst. They handle your information only to provide their service to us:

• Supabase stores your account, watches and sign-in records in Sydney, Australia.
• Vercel hosts the website and app. Requests can be processed outside Australia, including in the United States.
• PostHog receives the measurement described below and stores it in the United States.
• Stripe processes payments when you buy a plan, in Australia and the United States. We never see your full card number.
• Discord, in the United States, delivers alerts only if you connect your own Discord channel. When someone joins the waitlist, our team gets a Discord notice that does not include their email.
• Supabase sends sign-in codes, and an email service sends launch emails if you joined the waitlist. Your email address can be processed in the United States to deliver them.

What we measure

Where the hosting edge supplies it, PostHog also receives approximate country and city, never GPS coordinates or the visitor IP address in our event payload. Location may be inaccurate. You can mark this browser as internal for one year to distinguish your testing visits; this does not identify a person or apply to other devices.

A random ID for this browser tab helps us count page visits and product actions. When browser measurement is switched on, a separate random cookie recognises return visits for up to 30 days across getflipfirst.com, app.getflipfirst.com and docs.getflipfirst.com. A visit ID groups activity until 30 minutes of inactivity, with a maximum of 24 hours. These IDs do not contain your email. Signing in links accepted product actions to your account; sharing a browser does not merge accounts.

When you open Create watch, we record an account-linked attempt ID. If you save or leave the form, we record the outcome, time taken, failed submissions and clicks on watch setup help. An attempt with no recorded end stays unresolved; it is not treated as abandonment. We do not copy your watch terms into this measurement. Do Not Track and Global Privacy Control requests skip this task record.

For homepage comparisons, a separate random browser ID keeps the same artwork for up to 30 days across our website and app. We record which version was seen and whether a watch was created. The comparison is skipped for browsers marked internal or sending a Do Not Track or Global Privacy Control signal.

Our first-party event ledger is the source of record. When PostHog is configured, the same limited fields are also sent to PostHog in the United States. We do not use PostHog autocapture.

When browser measurement is switched on, this browser sends PostHog page views, named actions, scroll milestones, page performance timings and error reports with email addresses and URL queries removed. Masked replays show page structure and interactions. All text and element attributes are masked; forms, embedded content, images and other marked sensitive elements are blocked. We do not record console logs, network headers or request bodies. Internal and automated browsers, and browsers sending Do Not Track or Global Privacy Control, are excluded. PostHog keeps replays for up to 30 days. Blocked storage or collection can leave gaps in measurement without preventing you from using the product.

How we limit abuse

Account, measurement and checkout rate limits use a short-lived one-way hash of your IP address. The original IP address is not stored in those rate-limit tables.

First-party event and task-attempt records older than 90 days are removed by the next applicable event or scheduled maintenance, so removal can happen later if maintenance does not run. PostHog keeps its copy under the retention settings of the configured project.

Your choices

To leave the waitlist, use the unsubscribe link in any launch email, or email ajax@aquinus.net.

To see, correct or delete the information we hold about you, or to close your account, email ajax@aquinus.net from the address you use with FlipFirst. We reply to privacy requests within 30 days. There is no in-app button for this yet.

Sign out when you have finished on a shared device.

Complaints

If you think we’ve mishandled your information, email ajax@aquinus.net and we’ll respond within 30 days. If you’re not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.