Flip Sidebar sends nothing over the internet until you turn on one of the settings below. Each one is off by default and shows RuneLite's warning that it sends your IP address to a server not run by the RuneLite developers.
Your offers, coins, flip history, settings, and the plugin's trade journal (a record of your GE offers and what it suggested, kept 60 days, used to measure and improve the advice) stay in RuneLite's settings and the plugin's folder. Data sync is the only setting that sends any of it anywhere.
Asks the OSRS Wiki's price service (prices.runescape.wiki) for Grand Exchange prices. That service sees your IP address. Nothing about your account is sent.
Gets the same wiki prices from the plugin's own server, a cached copy, instead of from the wiki directly. The server (a Cloudflare Worker run by the plugin's author) sees your IP address. If it can't be reached, the plugin asks the wiki directly. Nothing about your account is sent.
Downloads an analysis of every item's price history from the plugin's server, at most once an hour. The server sees your IP address. Nothing about your account is sent.
Sends to the plugin's server, under a random id made on your computer (not your character's name unless you log in, below):
No coin balance is sent, and no character name unless you log in (below). In return it downloads everyone's finished flips, so the plugin learns from more flips than yours. The server sees your IP address. Turn Data sync off and nothing more is sent.
The panel's Log in button, or Log in with Discord on the My flips page, logs you in with Discord. Discord tells the server your Discord id, name and picture. Never your email, never your password.
While the plugin is logged in and Data sync is on, it also sends every finished flip (the item, how many, the buy and sell price, the profit and when it was bought and sold) with your character's name, so your page can show each character. Before you log in, no name is ever sent.
Only you can see your page. It isn't public, and it isn't shown to other players or in the Discord server. Log out in the panel and nothing more is sent. Delete my data on your page removes your account, your characters and every flip on it from the server.
The plugin's author, on Cloudflare. Data sync rows are stored in Cloudflare D1 and kept for the plugin's analysis. The server keeps at most 3,000 finished flips and the latest 3,000 offer uploads (about 500 hours of play) per random id, and deletes older ones.
Ask in the Flip Sidebar Discord, message @bycoo222 on Discord, or email flipsidebar.osrs@gmail.com.
Flip Sidebar is not made, endorsed or supported by Jagex or by the RuneLite developers.