Legal
Privacy Policy
Last updated: October 20, 2026
WonderLab AS ("WonderLab", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use Flipp.
1. Who We Are
WonderLab AS is a Norwegian company (org. nr. 934 618 971) based in Stavanger, Norway. We develop and publish Flipp, a PDF-to-flipbook converter available at flipp.page.
For any privacy-related inquiries, please contact us at hello@flipp.page.
2. Information We Collect
We design Flipp with privacy in mind. The information we collect depends on how you use the service:
Anonymous users (no account):
- IP address — stored with the flipbook for rate-limiting and abuse prevention, and deleted together with it.
- PDF files — uploaded files are converted into page images and stored on our servers. We keep the original PDF so your flipbook can be downloaded and re-rendered. It is deleted when the flipbook is deleted or expires; a backup copy of the PDF is kept for up to 30 days after that so we can recover from mistakes, then deleted.
Users with an account (free or Pro):
- Account information — email address used for authentication, managed through Supabase.
- Payment information — processed by Stripe, our payment provider. We never see or store your card details on our servers.
- Profile data — optional display name, username, profile photo, about text, social links, and custom domain settings. These are public only if you turn on your public profile.
3. How We Use Your Information
- To provide the PDF-to-flipbook conversion service
- To prevent abuse and enforce usage limits
- To manage your account and subscription (Pro users)
- To send the emails you need to use your account — sign-in links, password resets, receipts — never marketing
4. Data Processing
Uploaded PDFs are converted to page images by our own conversion software, running on our hosting providers (Vercel and Fly.io). Your documents are never sent to third-party conversion services. Original PDFs and generated images are stored on Cloudflare R2 and served through Cloudflare's content delivery network.
Spam protection. We use Cloudflare Turnstile to protect uploads against automated abuse. Turnstile evaluates limited browser and device signals to distinguish people from bots; it does not show you a challenge in normal use and does not disclose personal information to us. Cloudflare's handling of this data is described in the Cloudflare Turnstile Privacy Addendum.
Service providers. We rely on a small number of infrastructure providers to run Flipp: Vercel and Fly.io (hosting and conversion), Cloudflare (storage, content delivery, spam protection), Supabase (database and authentication), Stripe (payments), Resend (transactional email), and Sentry (error monitoring). Each provider processes only the data needed for its role.
5. Analytics and Tracking
Cookies come in three kinds here, and you choose two of them. Necessary: keeps you signed in and remembers your cookie choices; always on. Statistics: page counts so we know which pages people read; today this is Vercel Web Analytics, which sets no cookies. Marketing: only if you allow it, a Meta pixel cookie helps us see which of our Facebook and Instagram ads work — it tells Meta which of our own pages you visit and whether you upload, sign up or buy. Marketing cookies are used on our own pages only, never on flipbooks. You can change your choices at any time under "Cookie settings" in the footer; this paragraph lists every tool we use. Meta's handling of its data is described in Meta's Privacy Policy.
We also count flipbook views with a daily, one-way identifier that cannot identify you, and we use Sentry for error reports, which contain technical details about a failure, not your documents.
6. Data Storage and Security
Your data is stored securely using industry-standard practices. Flipbook images are stored on Cloudflare R2 with encrypted transit. Account data is managed through Supabase with row-level security policies. Original PDFs are also copied nightly to a separate backup store, where a copy is kept for up to 30 days after the original is deleted.
7. Data Retention
- Free flipbooks stay online for at least 2 years. Every view extends this period, so an actively viewed flipbook does not expire. Flipbooks with no views for 2 years are unpublished, and their files are permanently deleted after a 30-day grace period.
- Pro flipbooks have no expiry while your subscription is active. If your subscription ends, they move to the same 2-year rolling window as free flipbooks; an expiry date you set yourself on a flipbook is kept as it is.
- Deleting a flipbook yourself removes its pages and PDF from our storage immediately; the backup copy of the PDF is deleted within 30 days.
- You can delete your account yourself from the Account page. This cancels your subscription, removes your flipbooks, profile and account data, and takes effect immediately. Stripe's record of your invoices is kept for as long as accounting law requires.
8. Children's Privacy
Flipp is not directed at children under 13. We do not knowingly collect personal information from children.
9. Your Rights
Under the General Data Protection Regulation (GDPR) and Norwegian data protection law, you have the right to:
- Access any personal data we hold about you
- Request correction or deletion of your personal data
- Object to or restrict processing of your personal data
- Data portability
- Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)
To exercise any of these rights, contact us at hello@flipp.page.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us:
WonderLab AS
Høylandsgata 4
4011 Stavanger, Norway