Privacy Policy

LoopBack ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding it. By using the LoopBack browser extension or website you agree to the practices described here.

1. Data We Collect

Account data: When you create an account we collect your email address and a hashed password. We do not collect your name unless you choose to provide it.

License data: When you purchase a plan, our payment processor Stripe collects your payment information. We receive only a license key, your email, and a transaction reference - never your card details.

Usage data: We collect anonymised, aggregate usage statistics (e.g., number of pins created per session) to improve the product. These events do not contain the content of your notes or screenshots.

Support communications: If you contact support, we retain the content of that correspondence to resolve your issue and improve our documentation.

2. How We Use Your Data

We use your data solely to provide, maintain, and improve LoopBack. Specifically: to authenticate your account, validate your license, send transactional emails (order confirmation, license key, password reset), respond to support requests, and understand aggregate product usage.

We do not sell your data to third parties, run advertising, or share your data with any party except as described in section 4.

3. Local-First Storage

Feedback pins, screenshots, and project data are stored locally on your device by default, using Chrome's extension storage APIs and your local file system. This data never leaves your machine unless you explicitly enable Team Sync in settings.

When Team Sync is enabled, project data is encrypted in transit (TLS 1.3) and at rest (AES-256) on our servers. You can delete all cloud data from Settings → Data → Delete Cloud Data at any time.

4. Third Parties

Stripe: We use Stripe to process payments. When you purchase a plan, you are subject to Stripe's Privacy Policy. We receive only the minimum data necessary to validate your license.

Email delivery: We use a transactional email provider to deliver order confirmations and license keys. Your email address is shared with this provider solely for delivery purposes.

We do not use Google Analytics, Meta Pixel, or any behavioural advertising service.

5. Cookies

The LoopBack website uses a single session cookie for authentication when you are logged into the dashboard. We do not use tracking cookies or third-party advertising cookies. If you disable cookies, you will not be able to log in to the web dashboard, but the browser extension will continue to work normally.

6. Your Rights (LGPD / GDPR)

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you, correct inaccurate data, request deletion of your data, object to or restrict certain processing, and receive a portable copy of your data.

To exercise any of these rights, email us at loopback@promise.codes. We will respond within 15 business days. For Brazilian residents, these rights are guaranteed by the Lei Geral de Proteção de Dados (LGPD). For EU/EEA residents, they are guaranteed by GDPR.

7. Data Retention

Account data is retained for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are legally required to retain it (e.g., financial records for tax purposes, which are kept for 5 years).

8. Contact

Questions about this policy? Write to us at loopback@promise.codes. We are happy to clarify anything.