FlickPrivacy policy
Last updated November 14, 2026. This covers the Flick app (app.flickto.me), save-by-email and the Flick Chrome extension.
- Flick only sees what you choose to send it, one share at a time.
- We use it to deliver your save to the places you picked, and nothing else.
- No ads, no tracking, no analytics, and we never sell or share your data.
- Delete your account any time and everything goes with it.
What Flick collects
| Data | Why |
|---|---|
| Your email address | To sign you in (with a 6-digit code) and to deliver your saves. |
| What you flick: the page title and link, text you share, and any image or file you choose to send | To build the email (or Slack, Discord, webhook post) you asked for. |
| Your settings: save mode, subject prefix, destinations, time zone | So every save follows your preferences. |
| A short history of your saves (title, link, AI subject and summary) | For your history, search, duplicate checks and the optional weekly digest. |
| A sign-in token for each device or browser | So you stay signed in. We store only a one-way hash of it. |
Flick does not read your browsing history, the other tabs you have open, your inbox, or anything on a page you did not flick.
The Chrome extension
The extension acts only when you click its button, use its right-click menu items or press its keyboard shortcut. At that moment it sends the current tab's title and address, or the link, image or text you right-clicked, plus any quick tag you picked and, if you used "Flick to", the person or shared list you picked, to the Flick API at api.flickto.me. When the page is a YouTube video, it also reads that video's captions (the transcript) from the tab, using your own connection, so your email can include key points with timestamps.
It only touches the tab you flicked, and only at that moment: it shows a small "Saved" confirmation there and, on YouTube, reads the captions. It does not run on pages in the background, does not read other tabs, and does not collect browsing history.
It keeps your sign-in token, email address, save mode, quick tags and your recent recipients and lists in Chrome's extension storage on your computer. Signing out deletes them.
Flick's use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to provide Flick's single purpose (saving what you flick to your chosen destinations), we never transfer it for advertising, credit or data-broker purposes, and no human reads it except to fix a problem you report or where the law requires.
AI features
In the Simple and Curated modes, the content of a save is sent to Anthropic's Claude API to write a short subject line and summary. Anthropic processes it under its commercial terms, which do not allow it to train models on that data. Choose "Just the link" in Settings to turn AI off entirely.
Who processes your data
- Amazon Web Services (United States) hosts Flick, stores your account and save history, and sends your email through Amazon SES.
- Anthropic writes AI subjects and summaries, as above.
- Destinations you add yourself (Slack, Discord, Telegram, Todoist, Notion, a webhook) receive the saves you route to them.
That is the full list. There are no advertising, analytics or tracking services.
How long we keep it
- Sign-in codes expire after 10 minutes.
- Files uploaded for a save are deleted within 1 day; emails sent to save@flickto.me within 7 days.
- Save history is deleted automatically after 400 days.
- Your account and settings stay until you delete them.
Your choices
- Change your save mode or turn AI off in the app's Settings.
- Sign out of any device or the extension to revoke its token.
- Stop all Flick emails with the "Manage or stop Flick emails" link at the bottom of any Flick email. Resume them in Settings.
- Delete your account yourself in the app: Settings, then Danger zone, then Delete my account. It immediately removes your account, settings and destinations, your save history, reminders and price watches, and signs out every device, Shortcut and the Chrome extension. Emails already delivered to your inbox are yours and stay there.
- Ask us to export your data, or to delete it for you, using the contact below. We do it within 30 days.
Security
All traffic uses HTTPS. Sign-in codes and tokens are stored only as salted hashes. Tokens for third-party destinations are masked in the app and never shown again after you save them.
Children
Flick is not directed at children under 13 and we do not knowingly collect their data.
Changes and contact
If this policy changes in a way that matters, we will update the date above and tell you by email. Questions, export or deletion requests: privacy@flickto.me.