Legal
Privacy Policy
Last updated: July 8, 2026
WonderLab AS ("WonderLab", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use Flipp.
1. Who We Are
WonderLab AS is a Norwegian company (org. nr. 934 618 971) based in Stavanger, Norway. We develop and publish Flipp, a PDF-to-flipbook converter available at flipp.page.
For any privacy-related inquiries, please contact us at hello@wonderlab.no.
2. Information We Collect
We design Flipp with privacy in mind. The information we collect depends on how you use the service:
Anonymous users (no account):
- Email address — used solely as a rate-limiting key to prevent abuse. We do not send emails to anonymous users or use this address for marketing.
- IP address — stored temporarily for rate-limiting and abuse prevention.
- PDF files — uploaded files are converted into page images and stored on our servers. We keep the original PDF so your flipbook can be downloaded and re-rendered; it is deleted when the flipbook is deleted or expires.
Pro users (with account):
- Account information — email address used for authentication, managed through Supabase.
- Payment information — processed by Stripe, our payment provider. We never see or store your card details on our servers.
- Profile data — optional display name, username, and custom domain settings.
3. How We Use Your Information
- To provide the PDF-to-flipbook conversion service
- To prevent abuse and enforce usage limits
- To manage your account and subscription (Pro users)
- To send transactional emails related to your account (Pro users only)
4. Data Processing
Uploaded PDFs are converted to page images by our own conversion software, running on our hosting providers (Vercel and Fly.io). Your documents are never sent to third-party conversion services. Original PDFs and generated images are stored on Cloudflare R2 and served through Cloudflare's content delivery network.
Spam protection. We use Cloudflare Turnstile to protect uploads against automated abuse. Turnstile evaluates limited browser and device signals to distinguish people from bots; it does not show you a challenge in normal use and does not disclose personal information to us. Cloudflare's handling of this data is described in the Cloudflare Turnstile Privacy Addendum.
Service providers. We rely on a small number of infrastructure providers to run Flipp: Vercel and Fly.io (hosting and conversion), Cloudflare (storage, content delivery, spam protection), Supabase (database and authentication), Stripe (payments), Resend (transactional email), and Sentry (error monitoring). Each provider processes only the data needed for its role.
5. Analytics and Tracking
Flipp does not use cookies, third-party analytics, advertising SDKs, or cross-site tracking. To show publishers how their flipbooks perform, we count views using a privacy-preserving method: a one-way identifier that rotates daily, which lets us count unique visitors within a day without knowing who you are.
We also use error monitoring (Sentry) to detect and fix technical problems. Error reports contain technical data about the failure, not your documents.
6. Data Storage and Security
Your data is stored securely using industry-standard practices. Flipbook images are stored on Cloudflare R2 with encrypted transit. Account data is managed through Supabase with row-level security policies.
7. Data Retention
- Free flipbooks stay online for at least 2 years. Every view extends this period, so an actively viewed flipbook does not expire. Flipbooks with no views for 2 years are unpublished, and their files are permanently deleted after a 30-day grace period.
- Pro flipbooks are retained for as long as your subscription is active.
- Deleting a flipbook yourself permanently removes its files from our storage.
- Account data is deleted upon account cancellation, upon request.
8. Children's Privacy
Flipp is not directed at children under 13. We do not knowingly collect personal information from children.
9. Your Rights
Under the General Data Protection Regulation (GDPR) and Norwegian data protection law, you have the right to:
- Access any personal data we hold about you
- Request correction or deletion of your personal data
- Object to or restrict processing of your personal data
- Data portability
- Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)
To exercise any of these rights, contact us at hello@wonderlab.no.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us:
WonderLab AS
Høylandsgata 4
4011 Stavanger, Norway