Privacy Policy

This Privacy Policy explains how Flips (“we”, “us”) handles information when you visit flips.cash, docs.flips.cash, or related interfaces (the “Service”). Creating an account, connecting a wallet, or using the Service after this policy is posted means you understand the practices described here.

This is a product policy for a non-custodial trading interface. It is not legal advice, and it is not a substitute for the Terms of Service.

1. Who we are

Flips is the operator of the Service. Questions about this policy go to legal@flips.cash.

We are not a broker, bank, custodian, or investment adviser. We do not hold your private keys, and we cannot reverse on-chain transfers.

2. Information we collect

Account and identity

If you sign in with email or Google, our authentication provider Privy processes that identity so we can create and recover an embedded Ethereum wallet for you. We may receive an email address, a Google account identifier, and a stable user id. We do not receive your Google password.

If you sign in with a browser wallet, we collect the public wallet address you present and the signature that proves you control it.

A display handle, linked social handles, and profile fields you save are stored because you chose to publish them.

Wallets and on-chain activity

The Service is built around public blockchain data on Robinhood Chain (and other networks you interact with through the interface). Wallet addresses, balances, token holdings, NFT activity, transaction hashes, and related on-chain records are public. We index, cache, and display them so the terminal can show tape, positions, and history.

Embedded wallets created at login are generated and recovered through Privy. Flips does not store seed phrases or the signing keys for those wallets.

Device, usage, and errors

We collect technical data needed to run the site: IP address, browser type, device identifiers, approximate location derived from IP, pages viewed, referral URLs, and timestamps. Error reports may go to Sentry. That pipeline is configured not to send default personally identifying fields, but stack traces and request metadata can still include addresses or user ids that appear in the failing code path.

Cookies and local storage

We use cookies and similar storage to keep you signed in and to remember device preferences.

• Session cookies such as SIWE session and nonce cookies prove a wallet signed in for social features. They are not trading keys.
• A visitor cookie may be used to count views.
• Browser localStorage holds watchlists, alerts, theme, trading presets, onboarding state, and other desk settings on that device.

Third-party processors (Privy, Cloudflare Turnstile, and others) set their own cookies when their scripts run.

Information you send us

If you email legal@flips.cash or otherwise contact us, we keep the message, your address, and whatever you include so we can reply.

3. How we use information

We use the information above to:

• Create and maintain your account and embedded wallet path.
• Authenticate you, prevent abuse, and run bot checks (including Cloudflare Turnstile).
• Show live markets, holdings, theses, and other terminal features.
• Process deposits, withdrawals, bridges, and trades you initiate.
• Measure reliability, debug failures, and improve the Service.
• Communicate about the Service when you have asked us to, or when we must.
• Comply with law, enforce the Terms, and protect users and the Service.

We do not sell personal information. We do not use your trading activity to build an advertising profile for third-party ads.

4. Who we share it with

We share information with processors that help us operate the Service, including:

• Privy — authentication, email one-time codes, Google OAuth, embedded wallets, and optional on-ramps.
• Cloudflare Turnstile — bot checks on sign-in.
• Sentry — error reporting.
• Hosting and infrastructure — the servers, CDN, and database that serve flips.cash.
• Bridges, indexers, and market data — Relay, Blockscout, OpenSea, quote and news providers, and similar APIs you trigger by using those features.
• Professional advisers and authorities — if the law requires it, or if we need to defend a claim.

Public chain data is already public. Indexing it does not make it private.

A processor may only use the data we send to provide their service to us, except where you have a direct relationship with them (for example, Privy’s own terms when you authenticate).

5. On-chain records

Transactions you sign are broadcast to a public network. Once confirmed, they cannot be edited or deleted by Flips. If you publish a handle, thesis, or other content tied to an address, that association may remain visible in our index and on explorers even after you stop using the Service.

6. Retention

We keep account records while your account exists and for a reasonable period afterward if we need them for security, disputes, or legal obligations. Device preferences stay on your browser until you clear them. Error logs are kept only as long as they are useful for operations. On-chain history is retained in public ledgers independently of Flips.

7. Security

We use HTTPS, httpOnly session cookies where appropriate, parameterized database access, and least-privilege service credentials. No method of transmission or storage is perfectly secure. You are responsible for the devices, email inbox, Google account, and wallets you use to reach Flips. If you suspect unauthorized access, contact legal@flips.cash and rotate the compromised credential.

8. Your choices

Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold, or to object to certain processing. Email legal@flips.cash with the request and enough detail to locate your account (usually an email or wallet address). We may need to verify that you control that identifier.

You can:

• Sign out and disconnect wallets from the Session settings.
• Clear site data in your browser to drop local preferences.
• Close an account by writing to us. Closing the Flips account does not move or burn tokens on chain.

Some data we cannot erase because it lives on a public chain or because we must keep it for security or law.

9. Children

The Service is not directed at children under 18. We do not knowingly collect personal information from them. If you believe we have, contact legal@flips.cash and we will delete it where we can.

10. International use

You may access the Service from outside the country where our infrastructure runs. Information may be processed in the United States and other places where our processors operate. If that is not acceptable, do not use the Service.

11. Changes

We will post updates here and change the date at the top. Material changes take effect when posted, or on a later date we state. Continued use after an update means you accept the revised policy.

12. Contact

Flips legal@flips.cash

Related: Terms of Service and Disclaimer.