Privacy policy

Last updated: November 8, 2026

This policy explains what personal data Flagbearer collects, why, who it is shared with, and how you can get it deleted. Flagbearer is a sole proprietorship based in British Columbia, Canada ("we").

What we collect

Your account. Your email address, an optional display name, and a password hash if you sign up with a password. If you sign in with Google, we also receive your Google account's name, email and profile photo.

What you create. Organizations, members and invitations, applications, flags, environments, SDK keys and API tokens.

Billing. Your plan and subscription status. Card details go directly to Stripe and never reach our servers.

Your app's users. When your app uses a Flagbearer SDK, it sends us the identifiers your code passes in, such as a user key or email, along with which flags they were shown. You decide what to send. We process this data on your behalf, and only to show you flag exposures and to count your app's daily and monthly users for billing.

Counting your app's users. Each time a browser fetches flags, we count the person once per day. We identify them by the user key or email your code sends, or else by a random ID the browser SDK stores in the visitor's browser (flagbearer:anon in local storage), or else by their IP address and browser. We store only a keyed hash of that identity, never the identity itself, and we never use the stored ID for targeting.

Usage and security. Session cookies to keep you signed in, IP addresses to limit abuse, and a record of account activity (such as "organization created") that stores IDs, not names or emails.

Messages to us. When you use Share feedback, we receive your message and your account's email address so we can reply. When you use the contact form on our website, we receive the name, email address and message you enter. When you email one of our flagbearer.dev addresses, we receive your email.

How we use it

We use your data to run Flagbearer: to create and secure your account, serve your flags, show you exposures and usage, bill your plan, send account email (such as verification, password reset, invitations and plan usage notices), and reply to you. We don't use it for advertising and we don't sell it.

Cookies and tracking

We use cookies only to keep you signed in and secure. The website and dashboard have no analytics, advertising or third-party tracking.

How long we keep it

• Account and product data: until you delete it or your account.
• Flag exposure data per user: the current month and the two before it.
• Flag exposure totals, without user identifiers: 12 months.
• Hashed identities used to count users: the current month and the one before it.
• Daily user counts, without identities: 400 days.
• Account activity: 365 days.
• Request logs: 7 days.
• Rate limit records: 2 days.
• Messages to us: as long as we need them to help you.

Who we share it with

We share it only with the services we need to run Flagbearer:

• DigitalOcean hosts our servers and database in the United States.
• Resend sends account and notification email.
• ImprovMX forwards email sent to our flagbearer.dev addresses.
• Google handles Google sign-in, if you use it, and hosts the inbox our email is forwarded to.
• Stripe processes payments.

We may also disclose data when the law requires it.

Where your data is stored

Our servers are in the United States, and the services above may process data in other countries. Data stored outside Canada is subject to the laws of the country where it is held, which may let authorities there access it.

Keeping it safe

All traffic uses HTTPS. Passwords are stored only as hashes, and SDK keys and API tokens can be revoked at any time. Access to our servers is limited to us. No system is perfectly secure; if a breach puts your data at real risk, we will tell you and the authorities as the law requires.

Your choices

You can change your account details in Settings, and delete your account there at any time. Deleting your account removes your personal data and any organizations where you are the only member.

You can also ask us for a copy of your personal data, to correct it, to delete it, or to stop using it for a purpose, and you can withdraw consent you've given. Email privacy@flagbearer.dev and we'll reply within 30 days.

If your app sends us data about its users, you are responsible for telling them and for handling their requests. We'll help when you ask.

If you're not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or the data protection authority where you live.

Children

Flagbearer is a tool for software teams and isn't meant for children. Don't sign up if you're under 16.

Changes

If we make material changes to this policy, we will update the date above and tell signed-in users in the product.

Contact

Questions or requests about privacy go to the person responsible for privacy at Flagbearer: privacy@flagbearer.dev. We'll tell you who that is if you ask.