Last updated: 12 November 2026
This Privacy Policy explains how FlipTip AI (“FlipTip”, “we”, “us”) collects, uses, shares and protects personal data when you use our website and apps at fliptip.ai (the “Service”). We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR and other applicable privacy laws.
The Service is operated by the FlipTip AI team, which acts as the data controller. For any data-protection matter — including questions, requests, or to obtain our full controller and contact details — reach us at [email protected].
Google sign-in: we receive and store your name, e-mail address,
profile picture URL and Google account identifier.
E-mail sign-in link: we store your e-mail address. To sign you in we
send a one-time link that expires after 20 minutes and can be used only once.
We use this data to create and secure your account, recognise you across sessions
and contact you about the Service.
We store your country/market, language-related settings, plan and subscription status, free-trial status, daily scan counts, feature settings (for example the seller’s-price prompt or the Treasure Radar value threshold) and similar data so the Service works correctly and applies your plan limits.
Please avoid photographing people, documents or other personal information.
You can scan one item a day without signing up. The photo is sent to our AI service providers to identify and
value the item, exactly like a normal scan. To let you keep the result if you then create an account, we store a
small thumbnail of the photo and the result for 3 days, linked only to a random code in a cookie in your browser
(ft_gsid); if you sign up or sign in in that browser, the scan is moved into your scan history, otherwise
both are deleted after 3 days. To allow one free scan a day we keep a cookie with the date (ft_gsday)
and a one-way hash of your network address for the same day (not the address itself), and we count attempts per
network address for 24 hours. The page uses Cloudflare Turnstile to check that a person, not a bot, is scanning;
Cloudflare receives your network address and browser details for that check.
We store the results of your scans, the seller’s price if you enter one, and the information you add in the profit dashboard — purchase and sale prices, costs, where you bought and sold an item, its status and your monthly goal. On the Dealer plan we also store your AI Hunter searches and the alerts we send you. This data is used only to provide these features to you.
On the Flipper and Dealer plans you can connect your eBay account to publish listings from FlipTip. You sign in on eBay itself; we never see your eBay password. We then store: the access tokens eBay gives us, your eBay username and user ID, the eBay site you sell on, the address your items ship from (postal code, city, region, country — taken from your eBay account where it already has one, otherwise as you enter it or estimated from your connection's location for you to check), the IDs of your eBay shipping, payment and return policies, and for each item you publish: the listing text, the photos you choose or add, the eBay listing and offer IDs, its status and price.
To publish, we send eBay the listing (title, description, item specifics, condition, category, price), links to its photos and your ship-from address, and we read your eBay orders only to mark items as sold in your dashboard. Photos you add for an eBay listing are stored with us and made available to eBay at a hard-to-guess, signed address so eBay can download them. When you open the eBay preview, the item's photo and scan details are sent to our AI service providers to write the listing text and, if you ask for it, a white-background version of a photo. You can disconnect eBay in Settings at any time; your listings on eBay then stay as they are, and eBay's own privacy notice applies to everything on eBay.
Subscriptions are processed by PayPal. We store your PayPal subscription identifier, plan and billing status (for example the date until which a cancelled plan stays active). We never see, receive or store your card or bank details — these are handled entirely by PayPal.
To show local marketplaces, prices in your currency and nearby flea markets, we derive your approximate location (country, sometimes city) from your IP address and from the country you select, and may use your device’s precise location if you grant permission. Precise location is only used when you explicitly allow it and is not stored on our servers.
We send service e-mails (sign-in links, billing notices) and, unless you opt out, helpful messages such as a welcome e-mail, reminders before your trial ends and a weekly summary of your profit dashboard. Every non-essential e-mail contains an unsubscribe link.
If you post a comment on our pages, your comment and the name shown with it are public.
To stop the free trial being used over and over, we check whether an e-mail address (or a variant of it) already had a trial, refuse throw-away e-mail services, and count how many trials start from the same network (IP address, stored as a one-way hash for 30 days). When an account is deleted we keep only a one-way keyed hash of its e-mail address for this purpose; it cannot be turned back into the address.
To stop several free accounts being used for extra free scans, your browser gets a random identifier in a
cookie (ft_dev; it contains nothing about you). Accounts that don't pay share a daily number of scans per
browser and per network; for that we count scans per day against a one-way hash of the identifier and of your
network address (not the address itself), deleted the next day. The same identifier allows one free trial per
browser in 30 days. Sign-in and sign-up pages use Cloudflare Turnstile to check that a person, not a bot, is
signing in; Cloudflare receives your network address and browser details for that check.
When you first visit, we note how you found FlipTip: the page you landed on, the
site or app that sent you (for example TikTok), and a campaign or partner link code if
the link had one (cookie ft_src, see the Cookie Policy). When you sign up,
this is saved with your account so we can see which channels and partners bring people
who use and pay for FlipTip. If you came through a social app or a partner link, we also
keep a one-way hash of your network address for 7 days, so a sign-up in another browser
on the same network can be matched to that visit; the address itself is not stored.
Our servers and security tooling automatically process technical data such as IP address, browser type and request timestamps for security, abuse prevention, rate-limiting and diagnostics. Error logs may temporarily contain such data.
The optional FlipTip extension for Chrome and similar browsers reads the marketplace listing you are looking at (its title, asking price, currency, the start of its description, address and photos) on the marketplace sites it lists, only to show its ⚡ button there; on other sites only when you press its toolbar button, keyboard shortcut or “Check with FlipTip” on a photo’s right-click menu. Nothing leaves your browser until you press Check with FlipTip: then that one listing’s title, description (start), price, address and photos (or, when a photo cannot be loaded, a picture of the visible page) are handed to FlipTip in your own signed-in account and scanned like a photo you upload. FlipTip’s verdict for that listing is kept in the extension’s storage in your browser (the last 40 listings you checked) so the listing shows it again. The extension does not read other pages, your browsing history, your marketplace account or messages, and it has no access to your FlipTip password or payment data. The photos are kept only in the browser’s temporary extension storage until FlipTip opens (at most 10 minutes); the scan itself is handled like any other scan (see above). A setting in the extension turns the button off; removing the extension removes everything it stored.
Filling a listing on another site (crosslisting): when you press Fill on … for an item in your FlipTip dashboard, that item’s title, description, price and photos are handed from the FlipTip page to the extension in your browser, which opens the new-listing page of the site you chose and fills them into its form when you press Fill the form there. They are kept only in the browser’s temporary extension storage, for that one tab, at most an hour (or until you close the tab or press Done). FlipTip never publishes anything: you choose the category and publish on that site yourself, and that site’s own terms and privacy notice apply to your listing.
“X-Ray this sale”: when you choose it on a page (right-click or the toolbar button), the extension collects the addresses of the photos on that page, its title and address, and opens Sale X-Ray in your FlipTip account with them (see Sale X-Ray above).
When you add FlipTip to ChatGPT, Claude or another AI assistant (the connector at https://fliptip.ai/mcp,
see fliptip.ai/ai-assistants), your assistant sends FlipTip only what a tool needs — for
example the item name to look up, or the prices for the profit calculator — and FlipTip answers from its public data.
No sign-in, no account data and no photos. We do not store the questions or the answers. We count how often each tool
is used per day and the name of the app that called it (for example “Claude”), and use your network address only to
limit how many requests one address can send; the rate-limit record is a hash, deleted within a day. Your assistant’s own privacy
notice applies to your conversation with it.
| Purpose | Legal basis |
|---|---|
| Creating and running your account; scans, radar, listings, publishing to eBay, profit dashboard and AI Hunter you use; billing; service e-mails | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud and trial-abuse prevention, rate-limiting, IP-based country detection; measuring which channels and partner links bring users; improving the accuracy of identification and prices; helpful e-mails about the Service you use (with an unsubscribe option) | Legitimate interests (Art. 6(1)(f)) |
| Precise device location; non-essential cookies and third-party content | Consent (Art. 6(1)(a)) |
| Keeping records, responding to legal requests, tax/accounting | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal. You can object to processing based on legitimate interests at any time.
We share personal data only with service providers that help us run the Service. Each processes data on our behalf or as an independent controller for the limited purpose described below.
| Provider | Purpose | Region |
|---|---|---|
| AI service providers | Analysis of photos, radar frames and scan details; prices, verdicts and listings | Outside the EEA |
| Google — Sign-In, Fonts, Maps | Login, web fonts, embedded maps | USA / global |
| PayPal | Subscription payments | USA / EU |
| eBay (only if you connect your eBay account) | Publishing and managing your listings, reading your eBay orders to mark items sold | USA / global |
| E-mail delivery provider (e.g. Resend) | Sending e-mails | USA / EU |
| Hosting and network providers | Website and data hosting, delivery and security | EU / global |
| Cloudflare Turnstile (sign-in / sign-up and the free scan without an account) | Checking that a person, not a bot, is scanning | Global |
To look up prices we also query marketplace and price-data services (for example eBay and SoldComps) with item names and search terms only — no personal data.
We do not sell your personal data, and we do not share it with advertisers.
Some of our providers are located outside the European Economic Area. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, adequacy decisions where available, and the providers’ own compliance frameworks. We limit what we send: AI providers receive only what a feature needs (photos or frames for image analysis, the text of a scan result and the seller’s price for prices and verdicts) — never your name or e-mail address. If you do not wish your data to be processed in this way, please do not use the scan and radar features.
Subject to applicable law, you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability (the profit dashboard can also be exported as CSV); and withdraw consent. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects — our scan, radar and listing results are estimates and informational only, and do not make such decisions about you.
To delete your account, use Delete account in the app menu (see how to delete your account). For any other request, contact [email protected]. We respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
We use a strictly necessary session cookie to keep you signed in, and (with your consent) functional storage and third-party content. For full details and to change your choices, see our Cookie Policy or use the “Cookie settings” link in the footer.
The Service is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use it. We do not knowingly collect data from children below that age; if you believe we have, contact us and we will delete it.
We use measures such as HTTPS, HTTP-only secure session cookies, CSRF protection, single-use sign-in links and rate-limiting to protect your data. No method of transmission or storage is completely secure, but we work to protect your information.
We may update this policy from time to time. We will update the “Last updated” date above and, for material changes, provide a more prominent notice.
For any privacy question or request, contact [email protected].