Privacy Policy
This covers what Quipflip (quipflip.com) collects, why, and who it's shared with. Short version: we collect what running an account-based, public quip site requires, we don't sell your data, and the only outside companies with access to any of it are the ones that send email on our behalf. Our site analytics are self-hosted, not outsourced.
What we collect
Account information
When you register: a username, email address, and password (stored hashed, so we never see or store it in plain text). Optionally a display name and a profile color. If you set up a passkey instead of a password, we store the passkey credential, not a password.
Content you post
Quips, "Yes, and" builds, stars, follows, and setup ideas you submit. All of this is tied to your account and, except as noted below, is public: visible to anyone, including people without an account.
- Deleted quips are hidden immediately but kept (soft-deleted) rather than erased right away, so a moderation mistake or an accidental delete can be undone. They're not shown to anyone once deleted.
- Who starred a quip is visible only to the quip's own author, not the public.
- Follower and following lists are visible only to the account they belong to.
Contact and setup submissions
The contact form and the setup-suggestion form collect what you type in. For contact, that's your name, email, category, and message. The contact form also records the IP address you submitted from, used only to rate limit and catch spam (a hidden field for bots, and a per-IP submission limit); we don't use it for anything else.
Newsletter
Quipflip's daily email (the day's new setup, and sometimes a few featured quips) is sent through Kit, an email service provider. You can subscribe either by checking the box at registration, which subscribes the account's email, or without an account, using a standalone subscribe form that only asks for your email. Either way, your email address is passed to Kit to manage the subscription and the send. You can unsubscribe at any time from a link in the email itself.
Cookies
We use one cookie to keep you signed in (a session cookie) and a matching CSRF token to protect forms from cross-site attacks. No advertising cookies, and no third-party analytics service.
Analytics
We use Matomo, self-hosted on our own server, to see how many people visit and which pages get read. It's built from our web server's access logs rather than a tracking script running in your browser, so it sets no cookie and makes no extra request when you load a page.
Visitor IP addresses are anonymized before they're stored: the last two parts of the address are masked, so what we keep can't identify a specific device or connection. The raw address is used only for a moment, to work out a visitor's rough location, and then discarded. The underlying log data is deleted after 180 days; aggregated stats (like "how many people read this quip") are kept longer.
Who we share it with
We don't sell or rent your information. It's shared only with the service providers that make the site work:
- SMTP2GO delivers account email: verification, password resets, and setup-selection notices.
- Kit delivers the daily newsletter, for anyone who subscribes to it.
We'd also disclose information if required by law, or to protect the site or its users from abuse.
How long we keep it
We keep account and content data for as long as your account exists. You can delete your account yourself at any time, from your settings page. Deletion is permanent and immediate: there's no grace period and no recovery. It removes your account, your quips (including any soft-deleted ones still on file), the stars you've given and received, your follows, your setup ideas, your passkeys, your notifications, and your subscription to the daily email. Yes, and's that other people built on your quips stay up, no longer attached to yours. Contact-form messages are kept for our own records after they're resolved, and remain if you delete your account.
Children
Quipflip isn't directed at children, and we don't knowingly collect information from anyone under 13.
Changes
If this policy changes, we'll update the date above. Significant changes will be called out where reasonable. For now, that means this page.
Contact
Questions about your data? Get in touch.