Privacy policy

Who we are

Flagfolio is operated by Raul Manafov. You can reach us at flagfolio.support@gmail.com.

Your flag collection stays on your device

The countries you collect, the dates you added them in the app, your optional display name, caption and poster titles are saved in your browser's local storage on your device. This data is not sent to our servers (if you share a passport link, see below).

• It is not encrypted by Flagfolio and is not a backup. Anyone with access to your browser profile could see it.
• Clearing your browser data, private browsing, switching browsers or losing your device can delete it.
• You can export it as a JSON file, import it again, or delete it at any time in Settings.

What we don't collect

• No account, email address or password is needed to use Flagfolio.
• We never request location permission and don't use GPS, IP-based location or location history.
• We don't use advertising trackers or third-party analytics SDKs, and we don't sell data.
• Flagfolio does not set cookies and doesn't use device or advertising identifiers.

Share cards and posters

Cards are drawn on your device. A card contains only your flags, counts and the text you type. Nothing is published automatically: a card leaves your device only if you download it or choose an app in your device's share sheet, and from then on that app's own privacy policy applies.

Shared passport links

If you tap “Copy link to my passport” or share your card, the link carries your flags and your display name inside the link itself, after the # sign — a part of the address that browsers don't send to servers. We don't store shared passports. Anyone who has the link can see those flags and that name, for as long as the link exists; to stop sharing, stop sending the link (we can't revoke links, because we don't hold them).

The link also contains an anonymous referral code, made from your display name (if you set one) plus random characters, for example alex-k3x9m. It is saved in your browser and lets us count how many people opened your link and went on to create their own passport. We don't link it to anything else about you.

Anonymous statistics

To learn how people find Flagfolio and which features help, your browser sends short events to our server, such as “page viewed”, “builder opened”, “first flag added”, “flag added”, “card shared or downloaded” and “shared link opened”. Each event contains only:

• the event name;
• how this browser first arrived: the campaign labels of the link (for example utm_source=tiktok), “shared passport”, or the name of the website that linked here. We remember this first source in your browser's local storage only, so later events are credited to the same source;
• for page views, whether this is the browser's first visit or the first page of a session;
• for share events and visits from a shared link, the anonymous referral code described above.

Events never contain your flags, countries, name, caption, license key, cookies or device identifiers. Our server adds each event to daily totals (for example “12 passports created from TikTok on 12 October”) and doesn't store IP addresses, browser details or a record of individual events. The totals are kept in a database run for us by Upstash, Inc. (our processor) and are deleted automatically after about 13 months. We rely on our legitimate interest in understanding and improving Flagfolio.

You can switch statistics off at any time in Settings → Anonymous statistics; nothing is sent while it is off. We also treat a Global Privacy Control signal from your browser as an opt-out. “Clear my data” in Settings also removes the source labels and referral code saved in your browser.

Purchases and licenses

Passport Pro is not on sale yet; this section describes how purchases will work once it is.

Passport Pro is sold through Polar (polar.sh), which acts as the merchant of record. Polar and its payment partners process your payment, billing details and email under Polar's own privacy policy; we never see or store your card details. As the seller we receive order information from Polar, such as your name, email address, what you bought and the order status, which we use to provide the product, support and refunds, and to meet tax and accounting obligations.

When you activate or re-check a license, your browser sends your license key to our server, which forwards it to Polar to confirm it is valid for Passport Pro. The key and its activation ID are then stored in your browser's local storage so Pro keeps working; your browser re-checks them with our server when you open the app and from time to time while it stays open. We don't keep a database of license keys or flag collections.

Hosting and security logs

Our hosting provider processes standard technical request data (such as IP address, browser type and timestamps) to deliver and protect the website. Our license and statistics endpoints use IP addresses briefly in memory to limit repeated attempts and don't store them. These logs are kept for a limited period according to the hosting provider's settings.

Your rights

Because your collection is stored only on your device, you control it directly: you can view, export and delete it in the app. For purchase-related data, contact us at flagfolio.support@gmail.com to request access, correction or deletion, subject to legal record-keeping requirements. You may also have the right to complain to your local data protection authority.

Children

Flagfolio is not directed at children under 13, and purchases require the payer to be an adult.

Changes

If we change how data is handled, we'll update this page and the date above before the change takes effect.