Your data

Privacy policy

Effective September 21, 2026

FlipperStream analyzes pinball footage and keeps game histories. This notice describes the website and associated Pinprovement applications. The FlipperStream service operator can be contacted at privacy@flipper.stream for privacy questions and rights requests. A person who uploads footage may also have independent obligations to the people shown in it.

What we collect

• Account and profile: username, display name, email address, password hash, account settings, and authentication sessions.
• Footage and audio: recordings, live stream segments, platform video references, and any voices or people appearing in them.
• Analysis: frames and previews, OCR text, player and machine identities, scores, game events, timestamps, training annotations, and corrections.
• Facial identification: face crops and encrypted face embeddings used to match a player across recordings. These may be biometric data subject to special protection under applicable law.
• Technical records: IP address, request and security logs, device/browser information, and records of administrative changes or deletion requests.
• Billing information: billing address, real name, and payment information or a reference ID to it when processed through a third-party payment processor.

Why we use it

We use account and session data to provide the service, authenticate users, prevent abuse, and support requests. We process submitted footage to generate game records, statistics, player attribution, playback, and corrections. We use limited technical data to operate and secure the service. Where applicable, these uses rely on performance of our service agreement, legitimate interests in service security and operation, or another valid legal basis. Facial identification requires an additional valid basis and any explicit consent required by local law. The uploader's authority to submit footage is not, by itself, consent from everyone shown.

Analysis is automated and can be wrong. Users may review and correct events and player assignments. We do not use this analysis to make legal or similarly significant decisions about people, and we do not sell personal data or use it for advertising.

Who can see it

Signed-in workspace members and authorized administrators can access workspace content according to their roles. A session marked public can appear in the signed-in library; “public” does not mean accessible without a FlipperStream account. Anyone with authorized access to a recording may see people, names, scores, and associated events in it. Shared games may contain information about several people.

Where it goes

We use private object storage in public clouds, and self-hosted processing and recording services located in the United States. We may contact Kineticist for machine metadata and Twitch or YouTube to resolve user-supplied video references. Those services have their own privacy practices. We do not provide raw face embeddings to those services. If data is transferred across borders, applicable transfer safeguards must be assessed for the transfer.

Cookies and local storage

We use essential authentication and security cookies for sign-in, and browser local storage to remember light or dark theme. We do not currently run advertising cookies or third-party behavioral analytics on the site.

Retention and your choices

We generally keep account and workspace content until it is deleted or the workspace closes; completed recordings do not currently expire automatically. Some derived files are cleaned up when they become unreferenced. Backups and other exceptions are explained in the data deletion and retention policy.

Depending on your location, you may request access, correction, export, restriction, objection, withdrawal of consent, or deletion. You may also complain to a relevant data protection authority. Contact privacy@flipper.stream with the account, recording, player profile, or game link involved. We may ask for information needed to verify your identity. For a request concerning somebody else's upload, we will assess our role and coordinate with the uploader where necessary. Withdrawing consent does not affect processing that was lawful before withdrawal.

Security and changes

We restrict access to the service, store media privately, and protect authentication credentials and stored face embeddings. No system is risk-free. We will update this notice when our processing or service changes materially and show the effective date above. Contact privacy@flipper.stream with questions.