Privacy policy

How FlyerFinish handles your account information and artwork.

Last updated September 23, 2026

Who is responsible

FlyerFinish operates from Norway at flyerfinish.com. For questions about your information or artwork, email help@flyerfinish.com.

What we collect

  • Account information: your name, email address, sign-in providers, settings and optional communication choices. Email sign-in codes expire after 10 minutes.
  • Session information: sign-in times, browser information and an IP address when available, so you can manage signed-in devices and we can protect access.
  • Your work: uploaded artwork, file names and dimensions, generation settings, job status, finished videos and credit activity. If you choose to rate a video, we also save your answer and selected reason with that generation.
  • Support requests: the subject, message, category and any generation reference you submit.
  • Operational records: request and error information needed to run and troubleshoot the service.

Stripe processes payments. We store purchase references, amounts and payment status to manage your credits, refunds and disputes. FlyerFinish does not store payment card details.

Why we use it

We use your account information and artwork to provide the service you request, including saving work, generating videos and managing credits. This processing lets us perform our agreement with you.

Optional video feedback helps us improve effects and understand which results people find useful. You can change or remove your answer in the studio. Feedback is included in your account data export and removed when you delete your account.

Our legal basis for reviewing optional feedback is our legitimate interest in improving the service. Support and payment administration help us fulfil our agreement with you. We also keep records where required by accounting law and to establish or defend legal claims. Product updates, research invitations and optional analytics rely on your consent.

We use sign-in and error records to protect accounts, investigate problems and prevent misuse. Our legal basis for this processing is our legitimate interest in operating a secure service.

The account operator can review profile details, email preferences, generation status, purchases and support requests to help with account problems. They can correct display names, return or grant credits, end sessions and restrict new creation or purchases. These actions are logged with a reason. Account management does not grant access to your artwork or videos.

When artwork leaves FlyerFinish

For AI generations, preparing a request uploads your background to Higgsfield before you confirm the credit charge. FlyerFinish adds the separate type layer after animation. Camera-motion exports are processed by FlyerFinish without sending artwork to an AI model.

Higgsfield and the model providers involved process those inputs under their applicable terms and policies. Review Higgsfield’s privacy policy for details about retention and how it uses your inputs. Only upload material you are permitted to share with an external AI service.

Storage and service providers

We store your account details, preferences, support requests and generation records in our PlanetScale database. Cloudflare stores artwork and finished videos privately. Access through the app requires a signed-in account with permission to view the files.

If you choose Google sign-in, Google provides your basic profile and verified email to create or link your FlyerFinish account. We do not request access to your Gmail or Drive.

Cloudflare sends account and generation emails. Google Workspace handles correspondence sent to help@flyerfinish.com. Better Stack checks service availability and hosts our separate status page. Stripe Managed Payments handles purchases through Link, including payment documents, transaction support, refunds and disputes. See Stripe's privacy policy for its handling of payment information.

Processing outside the EEA

Our providers operate internationally, including in the United States. The published data processing terms for Cloudflare, PlanetScale and Google Workspace include standard contractual clauses for transfers where required. These clauses set obligations for protecting personal information transferred outside the EEA.

Higgsfield describes processing in the United States and other countries in its privacy policy. Its retention and transfer arrangements also apply to artwork submitted for AI generation. Contact help@flyerfinish.com to request information about the safeguards relevant to your data or a copy of the applicable contractual safeguards.

Cookies and browser storage

The FlyerFinish app uses browser storage for sign-in and to keep your place while you work. Optional Google Analytics loads through Google Tag Manager only after you accept analytics. Advertising tracking is off. The separately hosted status page is described below.

Analytics helps us understand which campaigns bring visitors and whether people sign up, buy credits and finish videos. Google receives a browser identifier, general device and connection information, campaign labels, page paths and selected actions. We send purchase references and amounts after payment is verified. We do not send your email address, artwork, file names, prompts or support messages as analytics event details.

Choose Necessary only to use the site without optional analytics. Open Cookie preferences in the footer to change your choice. Withdrawing consent stops future collection in this browser and clears pending purchase analytics for your signed-in account. It does not undo processing that has already taken place. Contact help@flyerfinish.com about deletion. Google describes its processing in its privacy policy.

Your cookie choice
flyerfinish.consent records your choice, its time and the version of this notice for 180 days. It is essential storage and is saved whether you accept or decline analytics.
Optional analytics
After you accept, Google Analytics uses flyerfinish_ga and flyerfinish_ga_ZNTBX7P1S3 cookies for up to 180 days. We turn off advertising personalization and Google signals.
Analytics during a visit
After you accept, session storage named flyerfinish.attribution remembers campaign labels, flyerfinish.auth-method identifies the sign-in method, and flyerfinish.events prevents repeated generation events in a tab. These last for the tab's session. A flyerfinish.signup cookie identifies a newly created account for up to ten minutes and is removed after that event is recorded.
Sign-in session
The __Secure-flyerfinish.session_token cookie keeps you signed in. It lasts up to seven days and can renew while you use the app. Signing out removes it. Only the server can read it.
Google sign-in security
A short-lived __Secure-flyerfinish.state cookie connects your Google sign-in request to its return visit. It expires after five minutes and is cleared when the sign-in completes.
Sign-in changes across tabs
flyerfinish.message in local storage tells other open tabs when your sign-in state changes. It holds the latest event and timestamp, rather than your sign-in code or session token. It is replaced by the next event and remains until you clear site data.
Your position on a page
tsr-scroll-restoration-v1_3 in session storage remembers your scroll position when you navigate back. It lasts for the browser tab's session.
Artwork while signing in
When you choose to sign in from the studio, the flyerfinish-signin browser database keeps your selected files and settings so you can continue on return. This does not upload the files. We remove the draft when restored. Abandoned drafts expire after 30 minutes and are cleared the next time this storage is used. Clearing site data removes them sooner.

Cloudflare Turnstile checks browser signals on sign-in forms to prevent automated abuse. Cloudflare may also use security cookies when it challenges a request. See the Turnstile privacy notice and Cloudflare's cookie information.

You can clear or block storage in your browser settings. Blocking sign-in storage prevents you from staying signed in; clearing studio storage removes any draft saved there. Google sign-in and Stripe/Link checkout also take you to their own websites, which have their own storage and privacy notices.

The status page

Better Stack hosts status.flyerfinish.com separately from the app. Its page currently loads its own Google Analytics, Google Ads and Better Stack browser tracking. These can place cookies on the flyerfinish.com domain, including _ga, _ga_CM1E1N1Q4R, _gcl_au and _bs. FlyerFinish does not load these tracking scripts inside the app. In our September 22 check, the advertising cookie lasted 90 days and the analytics cookies up to 400 days. The page also used local storage named _bs and _gcl_ls, which you can remove by clearing site data. Better Stack explains its processing in its privacy policy.

Email preferences

Generation notifications and video expiry reminders are enabled by default. They relate to your saved work and requested service. Product updates and research invitations are off until you opt in. You can use FlyerFinish without choosing either.

Change your choices or withdraw consent in your account at any time. Withdrawing consent does not affect processing that took place before you withdrew it. Sign-in codes, account security messages, credit adjustments and replies to support requests are separate from these preferences. Stripe/Link sends payment documents directly.

Retention and deletion

Uploaded artwork is available for 90 days after upload. Finished videos are available for 90 days after completion. Files become unavailable when they expire, and scheduled cleanup removes them from our storage. You can delete artwork in account settings and videos in the studio sooner. Download a copy of anything you want to keep.

We keep your account, preferences, support requests, video feedback and generation history until you delete your account. Expiring or deleting media does not remove its generation status or credit activity.

Purchase references, amounts, tax, refunds and dispute records remain after account deletion, with the link to the deleted account removed. We retain these records for accounting and resolving payment claims. Their retention depends on applicable record-keeping requirements and unresolved claims, rather than the 90-day media limit. Stripe/Link retains its own payment records under its privacy policy.

When you accept analytics and start checkout, we temporarily associate the browser and analytics session identifiers with that purchase. We erase those identifiers after sending the confirmed purchase to Google, or after two days if it remains unsent. Analytics delivery times remain with the purchase record. Your account data export includes pending identifiers. Google Analytics is configured to retain event and user data for two months, without extending that period for new activity. Aggregated reports can remain longer.

Automatic database backups run every 12 hours and are retained for two days. Deleted database records can remain in those backups until they expire. Backups are restricted to recovery use and do not restore artwork or video files deleted from media storage.

We keep operational alerts for up to 90 days and records of administrator actions for up to one year. These help us investigate failed generations, credit adjustments and service problems. Access is restricted to the account operator.

Transactional emails use Cloudflare Email Service. Support correspondence uses Google Workspace. Queued app message content is encrypted and removed after sending or expiry. Delivery records remain for up to 30 days. Sign-in codes expire after 10 minutes and account-deletion confirmation links after 15 minutes. Support emails in Google Workspace are separate from the app's support history; account deletion does not automatically delete that mailbox correspondence. Contact us to request its deletion. We may need to retain correspondence relevant to an unresolved request or legal claim.

Account deletion removes the active account records, associated support requests and owned artwork and videos. Active generations must finish and uncertain requests must be resolved first. Anonymous reserved generation costs are retained for spending records. Files already submitted to Higgsfield follow its retention rules; deleting your FlyerFinish account does not itself delete the provider’s copy.

Your choices and requests

In account settings, you can update your name, review sign-in sessions, sign out devices, set email preferences, export account data and delete your account. The export is a JSON file containing your account details and activity. Download videos separately in the studio.

For access, correction, deletion, restriction, portability or objections not covered by those controls, contact help@flyerfinish.com. Rights depend on the applicable law and processing involved. You may also contact the Norwegian Data Protection Authority.

Changes to this policy

We update this page when our handling of information changes. We will tell you about material changes before they apply.

Contact

For questions about this policy, email help@flyerfinish.com. FlyerFinish operates from Norway at flyerfinish.com.

Essential storage keeps you signed in and remembers these choices. It is always on.

Advertising tracking is off. You can change your choice here at any time. Read the details.