Flip Goblin is in early alpha — features are still taking shape and data may change. Tell us what you think
FlipGoblin

Privacy policy

Last updated 2026-07-12

Flip Goblin is a market-data tool for Old School RuneScape's Grand Exchange. This page lists everything we store about you, why, and how to get rid of it. The short version: we store nothing about you until you log in, everything personal is opt-in, and you can export or delete all of it yourself from Settings.

Browsing anonymously

Reading prices, charts and the flip finder requires no account and stores nothing about you. We use Cloudflare Web Analytics, which is cookie-less and does not profile or track you across sites — that's why there is no cookie banner here. The only cookie this site ever sets is the essential login session cookie, after you sign in.

If you log in (Discord)

Login uses Discord OAuth with the minimal identify scope. We store your Discord id, username, display name and avatar — never your email, and never your Discord token.

If you use the RuneLite plugin

The plugin tracks your Grand Exchange offers locally, in your client, with no account needed — a fresh install makes no network calls at all. Its one data switch is linking your (free) Flip Goblin account by pasting a token you mint in Settings; the token setting describes this exchange at the point of consent, and removing or revoking the token stops all of it. While linked:

  • Market data reads — the plugin fetches live prices for items you view at the GE; each request carries the item id and your token, nothing else.
  • Trade sync — your GE fills (item, side, price, quantity, time, slot) so your dashboard can show P/L across devices, plus your character's display name so the dashboard can label fills per character (one token per character; the name is a cosmetic label, never an identifier).
  • Price contributions — those same fills (never your GE slot) improve everyone's price resolution. Your contributions are linked to your account internally for abuse prevention only and are never published individually — only blended, quorum-checked aggregates ever appear on the site (kept up to 7 days raw).
  • Asset snapshots — bank/inventory item-quantity pairs, to your own dashboard.

Watchlists, alerts, notifications

Stored so they work: your watched items, alert rules, and fired notifications (notifications are pruned after 30 days). Browser push subscriptions store the push endpoint your browser issues us; disable it any time in Settings.

Payments

Premium is billed by Stripe. Card details go directly to Stripe and never touch our servers — we store only your Stripe customer/subscription ids and subscription status.

Feedback

Feedback can be sent anonymously. For anonymous reports we store a one-way hash of your IP address purely for rate limiting; it is never joined back to any account.

Where data lives, and who else sees it

Our services run on Cloudflare (site + API) and a DigitalOcean server (database, EU/US region as provisioned). Processors: Discord (login), Stripe (payments), Cloudflare (hosting + cookie-less analytics). We do not sell or share personal data with anyone else. Price data comes from the OSRS Wiki real-time prices API (we send them nothing about you). Some of these processors are US companies, so data may be processed outside the EU/EEA; each of them relies on the EU-approved safeguards for such transfers (Standard Contractual Clauses and/or the EU–US Data Privacy Framework).

Legal bases (EU/GDPR)

For visitors in the EU/EEA and UK, the legal bases we rely on are:

  • Contract — account data, watchlists, alerts, notifications, trade sync and billing exist to provide the service you signed up for.
  • Consent — the plugin transmits nothing until you link your account by pasting a token (the setting describes exactly what linking shares), and each browser-push subscription is explicitly requested; removing the token (or the subscription in Settings) withdraws that consent going forward.
  • Legitimate interests — abuse prevention and rate limiting (the hashed-IP counters on anonymous feedback, contribution sanity checks), and service security.

How long we keep things

  • Account data, trades, watchlists, alert rules — until you delete them or the account.
  • Fired notifications — pruned after 30 days.
  • Raw crowdsourced price contributions — up to 7 days (aggregates are anonymous).
  • Login sessions — expire within 7 days of inactivity.
  • Anonymous-feedback IP hashes — rate-limit windows only, never joined to accounts.

Your rights (GDPR and friends)

Settings has one-click Export my data (full JSON — this is your access and portability right) and Delete account (hard delete — trades, alerts, watchlist, tokens and notifications go with it; any active subscription is cancelled first). You also have the right to correct inaccurate data, to restrict or object to processing based on legitimate interests, and to withdraw consent at any time (the toggles above). If you are in the EU/EEA or UK you can additionally lodge a complaint with your local data-protection authority. For any request you can't self-serve: send feedback and we will respond within 30 days.

Children

Flip Goblin is not directed at children under 16 and we do not knowingly collect their data; an account only exists if you sign in through Discord, which itself requires meeting Discord's minimum age.

Who is responsible (controller)

The data controller is the individual operator of Flip Goblin. The fastest way to reach us for any privacy matter is the feedback page.