Privacy policy

Flip to Win is a Shopify app that runs a gift-reveal game between a merchant's ad and their product page. This policy explains exactly what the app and this website collect, why, where it is processed, how long it is kept, and how to have it removed.

Who we are

Flip to Win is operated by MDS Global, a sole proprietorship registered with the Dutch Chamber of Commerce (KVK 94937826, VAT NL005119590B24), established at Jan Pieterszoon Coenstraat 73BS, 3531EP Utrecht, the Netherlands. For anything in this policy, write to support@fliptowin.app. Because we are established in the European Union, the General Data Protection Regulation (GDPR) applies to everything we do with personal data.

The short version

• The game page sets no cookies and asks shoppers for nothing: no email, no name.
• Each play is identified by a random token. It identifies a play, not a person.
• We store an order's identifier and totals to show merchants whether the game paid for itself. We never store a customer's name, email, phone number or address.
• We do not sell data, show ads, run third-party analytics, or use data to train AI.
• The app's data lives in the EU. Uninstalling the app erases a store's data.

Merchants and shoppers play different roles

For the data the app processes about a store's shoppers, the merchant is the data controller and we are their processor under GDPR: we process it only to run the game and report on it, on the merchant's instructions, expressed through how they configure the app. For the data we hold about merchants themselves, and for visitors to this website, we are the controller. Our legal bases as a controller are performing our contract with the merchant, our legitimate interest in securing and improving the service, and legal obligations such as tax record-keeping.

Data we receive through Shopify's APIs

When a merchant installs the app, Shopify issues us an API access token together with the shop's domain and plan. Shopify may also supply the installing staff member's name, email address and language preference as part of authentication. We store the token to operate the app and read the shop's products, themes and discounts only as needed to set up campaigns.

We also store the shop's notification email address, the owner's name and the store currency, read from Shopify at install and kept in step when they change in the store's settings. We use the address for service emails about the merchant's own account (a campaign pausing, a gift product going out of stock, the free plan's monthly allowance filling up, a plan change) and for a small number of onboarding tips. The tips carry an unsubscribe link and stop the moment it is used; service emails are part of operating the app and continue while it is installed. We never email a merchant's shoppers.

With the merchant's authorisation (the read_orders permission, granted at install and covered by Shopify's protected customer data programme), Shopify notifies us of new orders. Each notification may contain customer details, but we do not keep them: we check whether the order carries one of our game-session tokens, and if it does we store only the order's identifier, its subtotal, the value of the gifts granted, and the session token it came with. That is what produces the "revenue from players against gift cost" figure in the merchant's dashboard. Everything else in the notification is discarded.

Data merchants give us directly

Campaigns are merchant content: names, copy, styling, custom CSS and HTML, product selections, and any images or font files a merchant uploads. Uploaded files pass through our server and are stored in the merchant's own Shopify Files library, not on our infrastructure. Emails sent to our support address are kept as ordinary correspondence.

Data about shoppers

When a shopper opens a game board, we create a game session containing a randomly generated token, timestamps, and a bot score. As they play we record which step of the funnel they reached and which gifts were granted. The token then travels in the shopper's cart so the gifts can be applied at checkout.

None of this includes a name, email address, phone number, postal address or IP address. Shopify strips cookies from app-proxy requests, so the game page cannot set or read one even if we wanted to. The game page also uses no browser storage and does not fingerprint devices, and we do not track shoppers across sites or sessions.

Bot filtering

To keep automated traffic from counting toward a merchant's view allowance, we evaluate each request's browser signals (its user-agent and language headers) in memory and store only the resulting score, as a number on the game session. The headers themselves are not kept.

What the game writes into the cart

To grant gifts, the game writes a small set of attributes into the shopper's cart on the merchant's own store: the campaign, the session token, the gifts granted and their display names, and the offer's expiry. These attributes belong to the merchant's store, persist on the resulting order, and are visible to the merchant in their Shopify admin like any other order attribute.

What we use data for

Running the game and granting gifts; counting views against the free plan's monthly allowance; showing merchants their own funnel and revenue analytics; keeping the service secure and filtering abuse; and syncing the merchant's subscription tier with Shopify billing. Nothing else. We do not sell or rent data, share it with advertisers or data brokers, or use it to train AI models.

Where data is processed, and who else touches it

The app runs on Fly.io infrastructure in the European Union (Paris), where its database also lives. The parties that process data on our behalf, or that receive it in operating the service, are:

• Fly.io: hosts the app and its database (EU region, Paris).
• Shopify: the platform itself: authentication, billing, orders, and the storefront the game runs on.
• Vercel: hosts this website (a static site; see "This website" below).
• Resend: delivers the merchant emails described above. Resend processes the recipient address and message content in order to send them.
• Cloudflare: provides DNS for our domain.
• Google Fonts: delivers fonts to the game page, the app's admin screens and this website. Loading a font sends the requesting browser's IP address to Google.
• Adobe Fonts: delivers this website's display typeface. Loading it sends the requesting browser's IP address to Adobe.

Some of these providers are established in the United States or process data outside the European Economic Area. Where that happens, transfers rely on the safeguards GDPR provides for, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as applicable to each provider. We will update this list before adding any new provider that handles personal data.

How long we keep things

A store's data (campaigns, game sessions, funnel events, view counters and order attribution) is retained while the app is installed, so historical analytics keep working. When a merchant uninstalls, Shopify sends us a deletion request and we erase all of that store's data, including its access token, within 30 days. Shopify also forwards individual customers' data requests and erasure requests to us, and we honour them within the same 30-day window. Support correspondence and records we need for tax and accounting are kept for as long as the law requires.

Your rights

If you are a merchant, you can ask us at any time for a copy of the data we hold about your store, or ask us to correct, delete or restrict it: email support@fliptowin.app. If you are a shopper, contact the store you played or bought from: under GDPR the merchant is the controller of your data, and your request reaches us through Shopify's official redaction channel, which we act on as described above. You also have the right to complain to a data protection authority: in our case the Dutch Autoriteit Persoonsgegevens, or the authority in your own country.

Security

All traffic to the app and this website is encrypted in transit (TLS). API tokens are held server-side and never exposed to browsers or storefronts. Access to production systems is limited to the operator. No method of storage is perfectly secure, but the app is designed so that the most sensitive categories of data (customer identities, payment details) are never stored at all.

Children

The app and this website are business tools for merchants and are not directed at children. The game page collects no identifying data from anyone, of any age.

This website

fliptowin.app is a static site. It sets no cookies, uses no analytics or advertising pixels, and has no forms; the playable demo runs entirely in your browser, so nothing you flip here is sent to a server. The only third parties involved are Google Fonts and Adobe Fonts, which receive your IP address when your browser fetches the site's typefaces. If we ever add analytics to this site, we will update this policy first.

Changes to this policy

If our data practices change (a new provider, a new feature that touches personal data), we will update this page before the change takes effect, and the date at the top always tells you which version you are reading. Material changes are announced to merchants in the app.

Contact

MDS Global · Jan Pieterszoon Coenstraat 73BS, 3531EP Utrecht, the Netherlands
KVK 94937826 · VAT NL005119590B24
Questions, requests, or a mistake you spotted in this policy: support@fliptowin.app.