Privacy Policy

This policy explains how outflip.lol collects, uses and shares information when you visit the site, click a listing or pay for a rank. It sits alongside our Terms of Service. The controller for personal data processed through the Service is BLB Consultancy FZCO, a company registered in the United Arab Emirates. Contact: info@outflip.lol.

No cookies, no accounts

The public site sets no cookies and has no user accounts. Your theme preference is stored locally in your own browser and never sent to us. Visitor counting works on a hash of your IP address and browser that also includes the date, so the identifier rotates every midnight and cannot follow you across days — which is why our stats say “visits”, not “visitors”.

What we collect

• Listing data. The URL or @handle you submit, the category and amount, and the public name, description, favicon and preview image we resolve for that destination. All of this appears on the public board.
• Payment data. The payment reference, the on-ledger transaction id and the paying wallet address, kept so a rank can be verified against the ledger and never credited twice. We never see or store private keys, and there are no card details anywhere.
• Invoice details (optional). If you fill in the invoice form at payment — name, address, business details, email — we store them with that payment to issue your receipt and invoice, and use the email only to send that receipt.
• Clicks and visits. Clicking a listing records the listing and a short-lived hash of your IP address, used to count each visitor once per hour and to rate-limit abuse — not to profile you. Visits use the daily-rotating hash described above.
• Technical data. Standard request data (IP address, user agent, referrer) is processed by our hosting provider to serve and secure the site.
• Messages you send us. Notices and requests you email us are kept as needed to respond and as a legal record.

The blockchain is public

Payments happen on the XRP Ledger, a public blockchain. Your wallet address, the transaction and its amount are permanently and publicly recorded there by the network itself — that record is not ours, and we cannot edit or delete it. The Xaman wallet processes the signing under its own privacy terms.

Why we use this data

• Contract — to verify payment, place or raise a listing, show ranks and issue receipts you asked for.
• Legitimate interests — to keep the board fair (rate limits, bot filtering, once-per-hour clicks), display public listing metadata, measure traffic, debug outages and defend legal claims.
• Legal obligation — to keep accounting and complaint records where the law requires it.

Public listings

Rank, amounts, names, images, descriptions and destination links on the board are public — anyone can see them, including search engines. Do not list a destination if you do not want that shown. Fetching a listing’s metadata may disclose to that site that outflip.lol requested the page; favicons are served through Google’s favicon service, which means your browser requests the icon of a listed domain from Google when you view the board.

Who we share data with

• Vercel — hosting, edge network, and privacy-friendly aggregate analytics.
• Supabase — our database (listings, payments, invoice details).
• Upstash — caching and the counters behind stats and rate limits.
• Resend — sends the receipt email if you provided an address for it.
• The XRP Ledger and Xaman — payment verification against public ledger data.
• Professional advisers, authorities, or a buyer of the Service where the law or a transfer of the project requires it.

We do not sell personal data. Some processors are outside your jurisdiction; where we rely on them, we use the safeguards they provide, such as standard contractual clauses.

How long we keep it

• Public listings stay while on the board and may remain in backups or activity history for a limited time after takedown.
• Payment references, transaction ids and invoice details are kept as long as needed for accounting, fraud prevention and dispute handling.
• Click hashes expire on their own within an hour; visit hashes within days.
• The ledger’s own record of your transaction is permanent by design.

Your rights

Where the GDPR or a similar law applies to you, you may ask us to access, correct, delete or export personal data we hold, to restrict or object to certain processing, and to complain to a supervisory authority. Email info@outflip.lol; we may need enough information to find your data. Note that we cannot alter the public ledger, and public listing content that also exists on your own site is not made private by being removed from the board.

Children and changes

The Service is for adults; we do not knowingly collect personal data from children — contact us and we will delete what we can identify. We may update this policy when the Service or the law changes; the date at the top is the current version.