Common FlipsPrivacy Policy
Last updated: October 6, 2026
This Privacy Policy explains how Common Flips ("Common Flips", "we", "us") collects, uses, shares and protects information when you visit www.commonflips.com, sign in, buy a membership, join our Discord community or take part in our affiliate program (together, the "Service"). By using the Service you agree to this policy.
1. Information we collect
Information you give us
- Email address and, where you provide it, your name, used to create your account and send sign-in links and service emails.
- Affiliate payout details, such as a Zelle or Cash App handle or a Stripe Connect account, if you join the affiliate program.
- Messages you send us by email.
Information from connected services
- Discord: when you connect Discord we receive your Discord user ID, username and avatar, and we can see whether you are in our server and which roles you hold.
- Stripe: our payment processor handles your card and billing details. We never see or store your full card number. We receive your Stripe customer ID, subscription and invoice records, plan, amounts, payment status and the last four digits and brand of your card.
Information collected automatically
- Account activity: sign-ins, subscription changes, access and Discord role events.
- Agreement records: when you buy or sign up we record which version of our Terms and policies you agreed to, the time, your IP address and your browser type, so we can show what was agreed if there is a dispute.
- Technical data: IP address, browser type and request logs, used for security, abuse prevention and rate limiting.
- Affiliate referrals: if you arrive through a referral link, we record a click and the referral code, and we attribute a resulting purchase to the referrer.
- Cookies and local storage as described in our Cookie Policy.
2. How we use information
- Create and secure your account and sign you in with email links.
- Process payments, manage subscriptions, trials, pauses and grace periods, and send invoices and billing notices.
- Grant, sync and remove your Discord roles and server access based on your membership status.
- Calculate and pay affiliate commissions.
- Send service messages such as sign-in links, payment failures and membership changes.
- Detect fraud, enforce our Terms of Service and protect the Service.
- Comply with legal obligations and respond to lawful requests.
We do not sell your personal information, we do not "share" it for cross-context behavioral advertising, and we do not use it for third-party advertising. We do not use data we receive from Discord for anything other than operating your membership, and we do not give it to third parties other than the service providers listed below. We do not respond to browser "Do Not Track" signals because we do not track you across other sites.
3. Who we share it with
We share information only as needed to run the Service:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing, subscriptions, invoices and affiliate transfers. |
| Discord | Sign-in with Discord, community membership, roles and invites. |
| Email delivery provider | Sending sign-in links and service emails. |
| Hosting and infrastructure providers | Running our servers, databases and queues. |
We may also disclose information if required by law, to protect rights, safety and security, or in connection with a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.
4. Retention
We keep account and subscription records for as long as your account is active and afterwards as long as needed for tax, accounting, dispute and legal purposes. Sign-in tokens and sessions expire automatically. You can ask us to delete your account at any time (see section 6).
5. Security
Sign-in links are single-use and expire. Session tokens are stored only as hashes on our servers, and the session cookie is HTTP-only and sent over HTTPS. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
6. Your rights and choices
Depending on where you live (including the EEA, UK and California) you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, contact us at [email protected]. We will verify your identity and respond within the time required by law. We will not discriminate against you for exercising your rights.
Deleting your data may end your membership and Discord access, and we may keep records we are legally required to retain. You can also revoke our access to your Discord account in Discord's Authorized Apps settings, and manage your subscription from your member dashboard.
If you are in the EEA or UK, our legal bases are performance of our contract with you, our legitimate interests in running and securing the Service, compliance with legal obligations and, where needed, your consent. You may also complain to your local data protection authority.
6A. U.S. state privacy rights
Residents of California, Colorado, Connecticut, Virginia, Texas, Utah and other states with privacy laws may have the right to know what personal information we collect and why, to access, correct, delete or obtain a copy of it, to opt out of the sale or sharing of personal information or targeted advertising, and to appeal a refusal. In the past 12 months we collected identifiers (email, name, Discord ID and username, IP address), commercial information (plan, payments, subscription status), internet activity (sign-ins, referral clicks) and, for affiliates, payout handles, for the purposes in section 2. We do not sell or share personal information as those laws define the terms, and we do not knowingly process sensitive personal information. To use these rights, email us as described in section 6. You may use an authorized agent, and we may need to verify your identity first.
6B. Security incidents
If we learn of a security incident that affects your personal information, we will investigate, take steps to contain it, and notify affected members and regulators where the law requires, by email or through our Discord server.
7. International transfers
We and our providers are based in or operate from the United States and other countries. If you are outside the United States, your information will be transferred to and processed in countries whose data protection laws may differ from yours.
8. Children
The Service is not directed to anyone under 18, and we do not knowingly collect information from them. If you believe a minor has given us personal information, contact us and we will delete it.
9. Third-party sites
The Service links to third-party sites and to retailers. We are not responsible for their privacy practices, so please read their policies.
10. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new "Last updated" date and, for material changes, notify you by email or in our Discord server.
11. Contact
Questions or requests: [email protected].