%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23f5acfe;%20}%20.st1%20{%20fill:%20%23bbfd6b;%20}%20%3c/style%3e%3c/defs%3e%3cpolygon%20class='st1'%20points='.2%2040%2039.9%20.3%2053.7%2014.2%2060.6%2020.9%2044.9%2036.5%2031.4%2035.2%2013.5%2053.2%20.2%2040'/%3e%3cpolygon%20class='st0'%20points='79.9%2040.1%2040.2%2079.8%2026.4%2066%2019.5%2059.2%2035.1%2043.6%2048.6%2044.9%2066.6%2026.9%2079.9%2040.1'/%3e%3c/svg%3e)
FileFlippers Limited ("we", "us") uses cookies and similar technologies on fileflippers.com ("Platform"). This policy explains what cookies we use, why we use them, and how you can manage your preferences.
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website remember your actions and preferences over a period of time.
2. Cookies We Use
2.1 Strictly Necessary Cookies and Storage
These are essential for the Platform to function. They cannot be disabled.
| Name | Type | Purpose | Duration |
|---|---|---|---|
sb-*-auth-token | Local storage | Keeps you signed in and renews your session | Until you sign out |
ff-cookie-consent | Local storage | Stores your cookie preferences | Until you clear it |
ff_ref | Cookie | Referral attribution — records which user referred you so we can credit their account. Only set when you arrive via a referral link. | 60 days |
ff_review_id_* | Local storage | One entry per shared transfer you comment on. Marks you as the author of your own review notes so you can edit or delete them, and holds the display name you were given. It contains a random key that acts as your credential for those notes, and we store only a hash of that key. Created only if you actually leave a note, never for visitors who just download. | Until you clear it |
ff_admin_impersonation | Local storage | Records an active authorised support session. Only ever set on a FileFlippers administrator's device. | Until the session expires |
Legal basis: These are exempt from consent requirements under Regulation 6(4) of the Privacy and Electronic Communications Regulations 2003 (PECR), as they are strictly necessary for the provision of the service.
Note on ff_ref: This cookie is only set when you arrive at the Platform via a referral link. It is used solely to attribute your registration to the referring user and is not used for advertising or profiling. See our Privacy Policy for full details.
2.2 Functional Storage
These remember your preferences, cache small parts of your account so pages render correctly, and record one-off messages you have already seen.
| Name | Type | Purpose | Duration |
|---|---|---|---|
ff-theme | Local storage | Your dashboard light/dark preference | Until you clear it |
ff-currency | Local storage | Display currency, stored only if you pick one yourself | Until you clear it |
ff-plan, ff-avatar-url | Local storage | Caches your plan name and the address of your profile picture so the dashboard and navigation bar render without a flash of empty state | Until you clear it |
ff-speed-metrics | Local storage | A rolling buffer of your most recent upload and download measurements (file size, duration, throughput and similar), capped at 200 entries. It is sent to PostHog only if you accept analytics cookies. If you do not, it stays on your device. | Until sent or you clear it |
ff_arcade_muted, ff_arcade_first_open, ff_arcade_konami_found | Local storage | Flipper Arcade sound setting, and flags for arcade messages you have already been shown | Until you clear it |
ff_nudge_*, ff_archived_feedback_*, ff:destruct-seen:* | Local storage | Records that you dismissed a prompt, archived a feedback note, or already watched a transfer's self-destruct message, so we do not show it to you again | Until you clear it |
Session keys, including authRedirect, autoResume, ff_upload_origin, ff_referral_code and ff_arcade_session_id | Session storage | Short-lived working state for the tab you have open: where to send you after signing in, which interrupted upload to resume, your in-progress transfer settings, and a random identifier for an arcade play session so anonymous scores can be rate limited and claimed if you later sign up | Until you close the tab |
2.3 Analytics Cookies
We use PostHog to understand how visitors use the Platform — which pages are popular, where people drop off, and which features are used. PostHog is only loaded if you click "Accept All" on the cookie banner. If you click "Essential Only" or close the banner, no analytics cookies are set and no analytics events are sent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
ph_*_posthog | PostHog (eu.i.posthog.com) | Distinct visitor ID, session ID, and feature-flag cache | 12 months |
PostHog data is hosted in the EU (Frankfurt) region. We use PostHog's identified_only mode, so anonymous visitors are tracked at the event level without a persistent user profile; only signed-in users get a profile linked to their FileFlippers™ account ID. We do not use cross-site tracking, and we never send your email address or name to PostHog.
We also record which pages you visit and which buttons and links you click, so we can find the parts of FileFlippers™ that confuse people and fix them. This is limited in three ways:
- We do not record your screen. There is no session replay or video of your visit.
- We record that an element was clicked, not what it said. Page text, including file names, is stripped in your browser before anything is sent, and so is anything you type into a field.
- Share links are stripped out of the recorded page addresses, so this data can never be used to reach one of your transfers.
Click tracking runs only for visitors who accepted analytics cookies. As with all analytics cookies, click "Essential Only" and none of this happens at all.
Withdrawing consent: clear the ff-cookie-consent entry from your browser's storage to be re-prompted, or block eu.i.posthog.com in your browser settings.
2.4 Third-Party Cookies
| Cookie | Provider | Purpose |
|---|---|---|
| Payment session cookies | Payment provider | Payment processing (set only during checkout) |
| Google OAuth cookies | Authentication (set only if you sign in with Google) | |
| Slack OAuth cookies | Slack | Authentication (set only if you sign in with Slack) |
These cookies are set by third parties and are subject to their respective cookie policies.
3. Managing Cookies
You can manage your cookie preferences:
- Cookie banner: Adjust your preferences using the cookie consent banner shown when you first visit the Platform.
- Browser settings: Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies may prevent the Platform from functioning correctly.
4. Changes
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
5. Contact
Questions about cookies? Email us at privacy@fileflippers.com.