What we do not collect

Your PDFs, the flipbooks built from them, their titles, their text, your passwords, and your logos: none of it ever reaches a Riffle server. There is no account system, so there is nothing to sign up for and no profile to build.

What we do collect

When you build a flipbook, your browser tells us a few facts about the build: your license key, if you have one; a one-way hash of your PDF, which lets us tell two files apart but not read either; the PDF's size and page count; how long the build took; and the size of the flipbook produced. We also see your browser's user-agent. We use this to stop license keys being shared and to settle support and refund questions, on the basis of our legitimate interest in both. It is stored with our database host, Supabase. Build records are deleted automatically after 24 months, and every deletion run is logged. The one thing we keep longer is the record of which documents a license key has covered, for as long as the key is valid, because the license itself depends on it. To have a record deleted sooner, email us with your license key.

Your device

The maker saves your license key, and a tally of the documents it has covered, in your browser's local storage so you do not have to enter it again. It stores nothing else on your device, and it sets no cookies.

Buying a license

Stripe processes your payment and gives us your email address, which we use to send your license key and up to two follow-up emails about your purchase, each with an unsubscribe link. We do not store your email address ourselves. If you unsubscribe, we keep a one-way hash of your address so we never email you again. If you tick the box at checkout to hear about news and offers, Stripe records that and we may email you about Riffle until you unsubscribe.

What the website sees

Riffle's pages are served by Vercel, our hosting provider, which processes standard web request data (IP address, user agent, requested URL) to deliver the site, as any web host does. See the Vercel privacy policy. On our marketing pages we count page views with Vercel's cookieless analytics: no cookies, no cross-site tracking, no profile. Fonts are served from our own domain, so no font service sees you. The flipbooks you build carry no analytics at all, and the maker sends only the build facts described above. We do not run advertising.

Password-protected flipbooks

If you set a password, your flipbook is encrypted with AES-256 in your browser and decrypted in the reader's browser. The password is not known to us and cannot be recovered by us. If it is lost, the file cannot be opened; keep the original PDF.

Your flipbook files

The files Riffle builds are yours. They work offline, they keep working if Riffle disappears, and they contain no tracking. Free-tier files carry a small "Made with Riffle" link and nothing else.

Contact

Questions about any of this? Email contact@riffleflipbook.app or see the contact page.