Privacy Policy

Introduction

Flipswitch ("we", "our", "us") operates the Flipswitch feature flag management platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Information We Collect

We collect the following types of information:

• Account information — your name, email address, and authentication credentials when you create an account.
• Feature flag data — the feature flags, targeting rules, and configuration you create within the platform.
• Usage logs — server logs including IP addresses, request timestamps, and flag evaluation metrics to operate and improve the service.
• SDK telemetry — anonymous connection metadata from SDKs (connection events, heartbeats) to ensure reliable flag delivery.
• Product usage analytics — feature usage events in the dashboard (e.g., flags created, settings changed) linked to your authenticated account, collected to improve the product.

How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Flipswitch service.
• Authenticate your identity and manage your account.
• Evaluate feature flags and deliver flag values to your applications.
• Monitor service health and troubleshoot issues.
• Communicate with you about your account or the service.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Cookies and Tracking

• Essential cookies — The Flipswitch application uses session cookies required for authentication. These are strictly necessary and do not track you across sites.
• Product analytics — When you are signed in to the Flipswitch dashboard, we collect anonymous product usage events (such as features used and pages visited) using PostHog. This data is linked to your account ID but is cookieless — no tracking cookies are set. We use this data solely to understand how the product is used and to improve it.
• Website analytics — Our marketing website and documentation use Vercel Web Analytics to collect anonymous, aggregated pageview data. No cookies are set and no personal information is collected.
• No advertising or cross-site tracking — We do not use advertising cookies, retargeting pixels, or any cross-site tracking technologies. We do not sell or share your data with advertisers.

Data Retention

We retain your account data and feature flag configurations for as long as your account is active. Usage logs and SDK telemetry are retained for up to 90 days. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law.

Data Security

We take reasonable measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights

You may request to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Export your feature flag configurations.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.