Fleepit Privacy Policy

What we process, why, where it is hosted, how long we keep it, and the rights you can exercise.

Last updated: October 2026

This Privacy Policy explains how 1plusV SARL, trading as Fleepit (“Fleepit”, “we”, “us” or “our”), collects, uses, stores and protects personal data when you use Fleepit websites, PDF-to-flipbook conversion services, hosted Flipbooks and related services (the “Services”).

Fleepit processes personal data in accordance with the General Data Protection Regulation (“GDPR”), the French Data Protection Act (Loi Informatique et Libertes) and other applicable data protection laws.

1. Data Controller

The data controller responsible for the processing described in this Privacy Policy is:

1plusV SARL – Fleepit
23, rue du Peintre Lebrun
78000 Versailles
France

Versailles Trade and Companies Register: 452 805 088

contact@fleepit.com

↑ Contents

2. Data We Process

The personal data processed by Fleepit depends on how you use the Services.

Fleepit allows certain Services to be used without creating an account.

When you upload a PDF, create or view a Flipbook, administer a Flipbook or otherwise interact with Fleepit, we may process:

  • the PDF or other Content you upload;
  • information contained within that Content;
  • technical identifiers associated with the Flipbook;
  • your IP address;
  • date and time of access or upload;
  • browser, device and technical connection information;
  • security and server logs;
  • information submitted through the “Report this Flipbook” function, including the name, email address and IP address of the person reporting;
  • identification data of the creator of a Flipbook: IP address, date of creation and, where applicable, account;
  • account data, where you create an account: email address and password (stored in hashed form);
  • payment information, where you purchase a paid plan: payments are processed by Stripe, and Fleepit receives the payment status and subscription identifiers, not your card details;
  • information necessary to administer the Flipbook; and
  • information relating to your cookie and advertising preferences.

We do not require an account for all uses of Fleepit.

↑ Contents

3. Uploaded Content

Documents uploaded to Fleepit may contain personal data relating to the person uploading the document or to third parties.

The person uploading Content is responsible for ensuring that they have the necessary rights, permissions and, where applicable, legal basis to upload, publish and share that Content.

Fleepit processes uploaded Content primarily to provide the requested conversion, hosting, display, security and moderation Services.

Fleepit does not claim ownership of uploaded Content.

↑ Contents

4. Flipbook URLs and Admin Links

When a Flipbook is created, Fleepit may generate:

  • a URL allowing the Flipbook to be viewed and shared; and
  • a separate administration URL (“Admin Link”) allowing the Flipbook to be administered or deleted.

Every Flipbook is private by default: it is not indexed by search engines and is not listed on the Fleepit website. Only Premium accounts can make a Flipbook public, and it is then proposed to search engines after review by Fleepit.

Fleepit does not offer password protection: anyone who obtains a Flipbook URL can access the corresponding Flipbook.

A Flipbook URL should therefore not be considered confidential storage.

The Admin Link functions as a security credential and must be kept confidential.

Fleepit may process technical identifiers associated with these URLs in order to provide, administer and secure the Service.

↑ Contents

5. Why We Process Personal Data

Providing the Fleepit Service

We process uploaded Content and associated technical information to convert, host, display, administer and deliver Flipbooks.

Legal basis: performance of a contract or steps taken at the user's request prior to entering into a contract.

Security and prevention of abuse

We process technical information, including IP addresses and server logs, where necessary to secure the Service, detect malicious activity, prevent fraud and abuse and protect Fleepit and its users.

Legal basis: Fleepit's legitimate interests in protecting and securing the Services.

Content moderation

Authorised Fleepit personnel review uploaded Content, in particular newly created Flipbooks and reported Flipbooks, to identify Content that may violate applicable law or the Fleepit Terms of Service. Fleepit does not use automated systems to take moderation decisions.

Legal basis: Fleepit's legitimate interests in maintaining a safe and lawful Service and, where applicable, compliance with legal obligations.

Reports concerning Flipbooks

When someone uses “Report this Flipbook”, we process the information contained in the report and the relevant Content to investigate the report.

Legal basis: compliance with applicable legal obligations and Fleepit's legitimate interests in preventing misuse and enforcing its Terms of Service.

Identification of Flipbook creators

French law requires hosting providers to keep the data allowing the identification of the person who put Content online, so that it can be provided to competent authorities on request. We keep the IP address, date of creation and, where applicable, the account of the creator of each Flipbook.

Legal basis: compliance with a legal obligation (French law no. 2004-575 of 21 June 2004, article 6, and decree no. 2021-1362 of 20 October 2021).

Limits, restrictions and bans

We process account identifiers and IP addresses to apply the daily creation limit, to record refused attempts and to apply temporary or permanent restrictions decided against abusive accounts or IP addresses.

Legal basis: Fleepit's legitimate interests in preventing abuse and keeping the Service lawful.

Payments

When you purchase a paid plan, the payment is processed by Stripe. We keep the payment status, the plan purchased and the subscription identifiers, in order to provide the plan and manage the subscription.

Legal basis: performance of a contract and compliance with accounting obligations.

Protection against automated abuse

Some forms use Google reCAPTCHA, which analyses technical information about your browser and interactions to distinguish people from automated programs.

Legal basis: Fleepit's legitimate interests in protecting the Service against spam and automated abuse.

Embedded music

Some Flipbooks include a Spotify player chosen by their owner. Spotify receives technical information when the player is displayed and applies its own privacy policy.

Legal basis: Fleepit's legitimate interests and those of the Flipbook owner in displaying the requested content and, where required, consent.

Advertising

Fleepit uses Google AdSense to display advertising.

Where cookies, local storage or other technologies requiring consent are used for advertising purposes, such processing is based on the user's consent.

Legal basis: consent where required by applicable law.

↑ Contents

6. Moderation

Content moderation at Fleepit is carried out by authorised Fleepit personnel. Fleepit does not use automated systems, including artificial intelligence, to take moderation decisions.

Fleepit reviews newly created Flipbooks on a regular basis, generally every 24 hours, as well as every reported Flipbook.

The reviewer assesses the Content, its context, the Fleepit Terms of Service and applicable law before determining whether action is appropriate.

Depending on that assessment, Fleepit may:

  • take no action;
  • request additional information;
  • restrict access to the Flipbook;
  • temporarily disable the Flipbook;
  • remove the Content; or
  • restrict the account and/or IP address concerned, temporarily or permanently.
↑ Contents

7. Reports and Human Review

Each hosted Flipbook may include a “Report this Flipbook” function.

When a report is submitted, Fleepit may process:

  • the URL or identifier of the Flipbook;
  • the reason for the report;
  • information provided by the reporting person;
  • contact information provided with the report;
  • the relevant Content; and
  • information relating to Fleepit's investigation and decision.

Reports are reviewed by authorised Fleepit personnel. Where an email address is provided, the person reporting receives an acknowledgement of receipt and then the decision.

Reports concerning child sexual abuse material or other serious offences may be transmitted to the competent authorities, in France the Pharos platform.

Submitting a report does not automatically result in removal of a Flipbook.

↑ Contents

8. Hosting and Data Location

Fleepit's infrastructure and Flipbook hosting are provided by Scaleway SAS (8 rue de la Ville l’Évêque, 75008 Paris, France) and located in France.

Uploaded Flipbook Content is hosted in France.

Advertising services are addressed separately below and may involve processing by Google and its partners in other countries.

↑ Contents

9. Data Retention

Flipbooks and uploaded Content

A Flipbook and its Content stay online as long as the Flipbook is being read. A Flipbook that has received no views may be deleted during periodic clean-up operations. A Flipbook may also be deleted earlier where:

  • the Flipbook is deleted by its administrator;
  • deletion is required by law;
  • the Content violates the Fleepit Terms of Service; or
  • continued retention is necessary in connection with a legal obligation, dispute, investigation or legal claim, in which case it is kept for that purpose only.

When Content is deleted from the active Service, residual copies may temporarily remain in technical backups until they are overwritten or deleted according to Fleepit's backup lifecycle.

Identification data of Flipbook creators

The IP address, date of creation and account of the creator of a Flipbook are kept for one (1) year from the creation, as required by French law, then deleted. This data is kept even if the Flipbook is removed earlier.

Reports, restrictions and refused attempts

Report data is kept as long as necessary to handle the report and document the decision. Records of refused creation or payment attempts are deleted after one (1) year. Restrictions decided against an account or IP address are kept for as long as they apply.

Other Fleepit data

Personal and technical data processed directly by Fleepit outside the hosted Flipbook Content, including relevant connection and technical data, is generally retained for no longer than 13 months, unless a shorter period applies.

Certain information may be retained for longer where this is necessary to:

  • comply with a legal obligation;
  • investigate security incidents or abuse;
  • establish, exercise or defend legal claims; or
  • document a moderation decision or legal notice where continued retention is justified.

Advertising data processed independently by Google is subject to Google's own applicable retention policies.

↑ Contents

10. Google AdSense and Advertising

Fleepit uses Google AdSense, an advertising service provided by Google, to display advertisements.

Depending on your choices and applicable law, Google and its advertising partners may use cookies, local storage, identifiers or similar technologies in connection with advertising.

These technologies may be used for purposes including:

  • delivering advertisements;
  • limiting the number of times an advertisement is displayed;
  • measuring advertising performance;
  • preventing advertising fraud;
  • selecting advertisements; and
  • where you have provided the required consent, personalising advertisements.

Google and its advertising technology partners may receive information such as your IP address, device or browser information, advertising identifiers and information concerning your interaction with advertisements.

Fleepit does not provide the content of your uploaded PDFs to Google AdSense for the purpose of advertising personalisation.

Where required by applicable law, advertising cookies and similar technologies are activated only after the required consent has been obtained.

Users may accept, reject or manage their advertising choices through the consent interface displayed by Fleepit.

Consent may subsequently be withdrawn or modified through the privacy or cookie settings made available on the Service.

Refusing advertising cookies does not prevent access to the essential functionality of Fleepit.

The list of advertising technology providers and further information about the processing performed for advertising purposes may be made available through the consent management interface.

↑ Contents

11. Cookies

Fleepit does not use audience-measurement cookies for its own analytics purposes.

Fleepit uses or may permit:

Strictly necessary cookies or storage

These may be used where necessary to:

  • provide requested functionality;
  • maintain security;
  • remember privacy choices;
  • prevent abuse; or
  • operate essential technical features.

Where permitted by applicable law, strictly necessary technologies do not require consent.

Advertising cookies and technologies

Google AdSense and participating advertising technology providers may use cookies or similar technologies.

Where consent is legally required, these technologies are not activated until the required consent has been obtained.

Fleepit's consent interface allows users to make choices concerning advertising technologies and, where applicable, participating advertising providers.

Users can subsequently modify or withdraw their choices.

↑ Contents

12. Consent Management

For users in the European Economic Area and other regions where applicable, Fleepit uses a consent management mechanism compatible with the requirements applicable to Google AdSense.

The consent interface provides information about the relevant purposes and advertising providers and enables users to make choices concerning advertising technologies.

Where required, users may:

  • accept advertising processing;
  • reject advertising processing;
  • manage their choices; and
  • subsequently withdraw or modify consent.

Refusal of optional advertising technologies does not prevent access to the core Fleepit Service.

↑ Contents

13. Who May Receive Personal Data

Depending on how you use the Service, personal data may be accessible to:

  • authorised Fleepit personnel;
  • Scaleway, for infrastructure and hosting;
  • Google, in connection with Google AdSense and Google reCAPTCHA;
  • Stripe, for payment processing;
  • Spotify, when a Flipbook includes a Spotify player;
  • advertising technology providers authorised through the applicable consent mechanism;
  • professional advisers where reasonably necessary; and
  • competent courts, regulators, law enforcement authorities or other public authorities, including the Pharos platform in France, where disclosure is legally required.

Fleepit does not sell uploaded PDFs or Flipbook Content to advertisers.

↑ Contents

14. International Data Transfers

Fleepit's primary hosting infrastructure and uploaded Flipbook Content are hosted in France.

Google (AdSense and reCAPTCHA), Stripe, Spotify and advertising technology providers may process personal data outside France and, in some circumstances, outside the European Economic Area.

Where personal data subject to the GDPR is transferred to a country outside the European Economic Area, applicable transfer mechanisms and safeguards must be used where required, which may include an adequacy decision or appropriate contractual safeguards.

Further information concerning advertising providers and applicable processing may be available through Fleepit's consent management interface.

↑ Contents

15. Security

Fleepit implements appropriate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

However, no internet service can guarantee absolute security.

Users are responsible for protecting their Admin Links and any account credentials.

Anyone who obtains a valid Admin Link may potentially be able to administer or delete the corresponding Flipbook.

↑ Contents

16. Your GDPR Rights

Subject to the conditions and exceptions provided by applicable law, you may have the right to:

  • access personal data concerning you;
  • obtain correction of inaccurate personal data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive certain personal data in a portable format;
  • withdraw consent at any time where processing is based on consent; and
  • lodge a complaint with a competent supervisory authority.

Where processing is based on consent, withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.

In France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertes (CNIL).

↑ Contents

17. Exercising Your Rights

You may exercise your data protection rights by contacting:

contact@fleepit.com

Please provide sufficient information to allow us to identify the relevant data and understand your request.

For a Flipbook created without an account, possession of the Admin Link may assist Fleepit in establishing that you control the relevant Flipbook.

Where necessary to protect personal data or prevent fraudulent requests, Fleepit may request additional information reasonably necessary to verify identity or authority.

↑ Contents

18. Children's Privacy

Fleepit is not intended for use by children below the minimum age specified in the Fleepit Terms of Service.

Fleepit does not knowingly seek to collect personal data directly from children in violation of applicable law.

If you believe that personal data concerning a child has been unlawfully published through Fleepit, please use the “Report this Flipbook” function or contact us.

↑ Contents

19. Legal Requests

Fleepit may preserve or disclose information where necessary to comply with applicable law, a legally binding request, court order or order from a competent authority.

Information may also be preserved where reasonably necessary for the establishment, exercise or defence of legal claims.

↑ Contents

20. Changes to this Privacy Policy

Fleepit may update this Privacy Policy to reflect changes to the Services, technologies used, legal requirements or data-processing practices.

The current version will be published on the Fleepit website together with its latest update date.

Where required by applicable law, Fleepit will provide additional notice or obtain consent before materially changing how personal data is processed.

↑ Contents

21. Contact

For questions about this Privacy Policy or the processing of personal data, or to exercise your rights, contact:

1plusV SARL – Fleepit
23, rue du Peintre Lebrun
78000 Versailles
France

contact@fleepit.com

You may also contact the French supervisory authority:

Commission Nationale de l'Informatique et des Libertes (CNIL)
France
↑ Contents
Fleepit
© 2026 Fleepit. All rights reserved.