Your files never touch our servers.

Summary

• Everything you share lives in your own Cloudflare account. We never see your files, your links or who opened them.
• There is no account with us and no sign-in.
• Loop sends us only update checks, licence checks, anonymous usage counts you can turn off, and crash reports when you choose to send one.
• We only learn your email address if you buy a licence or write to us.

Company

The controller for any personal data we hold about you is TJH/CO LIMITED, trading as THEODORE HQ, a company registered in England and Wales, company number 16589593, at Fairway House, Links Business, Fortran Rd, St. Mellons, Cardiff, CF3 0LT, United Kingdom. Email support@theodorehq.com.

Given the small scale and low-risk nature of our processing, we are not required to appoint a Data Protection Officer and have not done so.

Files and Readers

When you share a file, Loop uploads it to your own Cloudflare account. The link, the file and everything recorded about the people who open it stay there, under your Cloudflare terms. Nothing passes through us.

A link page records when it was opened, a rough location (country, region and city, never the network address), the kind of device and browser and how long each page was read. A signature also keeps the browser’s full description, as part of its proof. Link pages set a cookie so that a reader’s visit counts as one reader. For readers in the UK, the EU and the EEA, or whose country is unknown, it ends when the browser closes; elsewhere it lasts a year so that return visits count as the same reader. A request page sets one, lasting a year, so that someone sending files does not have to type their name and email again, and your own browser gets one, also lasting a year, when you choose to stop your own opens being counted. They are used for nothing else. If a reader gives an email or a name, signs, leaves a note or sends files, that is kept too. You hold this data, so for your readers you are the controller. Every link page carries its own short privacy notice, and Settings > Privacy deletes a reader’s data, keeping only signatures as proof.

A shared website can load things from other companies, such as fonts, videos or analytics. Those companies can see that a reader visited, under their own privacy terms.

On Your Mac

Your settings, your Loop folder and a copy of your link history stay on your Mac. Your licence key and your Cloudflare sign-in are kept in the macOS Keychain.

macOS asks before Loop can use your Contacts (to suggest email addresses), the microphone and camera (only for recordings you choose to make with them) or the Finder (to share the files you select). All of these stay on your Mac, and each can be withdrawn in System Settings.

Data Sent to Us

• Update checks. Loop checks for updates automatically about once an hour by downloading a small file from our website. Like visiting any website, this shares your IP address with our web host.
• Licence checks to Polar (api.polar.sh), when you enter a key or it is re-checked: your key and your Mac’s name (as shown in System Settings > General > About), to keep to three Macs a licence.
• Anonymous usage counts to aptabase.theodorehq.com, a small analytics server we run ourselves rather than handing to an analytics company. It records a handful of plain events, such as the app being opened, a free trial starting or a licence being activated, so we can tell whether Loop is being used. It carries no name, no email, no files, no link names and nothing about the people who open your links. During a free trial, these counts also say which day of the trial it is, whether Loop was used that day, and the first time each main thing happens: a link made, one of your links opened, or a request for files made. During setup, they also record once which steps were reached (signed in to Cloudflare, storage switched on, setup finished or a team joined) and whether help was offered or Email Us was pressed, so we can see where setup is hard. They stay anonymous, and the same switch turns them off. If a count cannot be sent, for example because a network blocker refuses it, Loop tries again a couple of times over a few minutes and then drops it. These counts are on from the start, so the first one is sent when Loop first opens, before you have seen the switch. You can turn them off at any time in Settings > Support (Share Anonymous Usage); your licence and trial work exactly the same either way.
• Crash reports, only if you choose to send one. See Crash Reports below.

Crash Reports

If Loop ever quits unexpectedly, it asks the next time you open it whether to send us a crash report. Nothing is sent unless you choose Send or Always Send, and you can turn Always Send off at any time with Send Crash Reports in Settings > Support. A crash report holds only technical details about the crash: the Loop version, your macOS version, your Mac’s chip, and where in Loop it happened. It holds nothing about you, your files or the people who open your links, and the full crash report macOS keeps on your Mac never leaves it. Reports go to our Support Centre, where your internet address is used only to stop any one address sending too many, and is never stored.

Data We Hold

• Your email and purchase record, if you buy. To fulfil our contract with you, and because tax law requires it. Kept seven years after your last purchase, as HMRC tax rules require.
• Your licence key and the Macs it is active on. To fulfil our contract, and to stop one licence being shared without limit.
• Licence activations: the time, country and network address of each activation. Kept twelve months, then deleted by Polar.
• Anything you write to us. To answer you. Kept two years.

When you buy, you can tick an optional box to get the THEODORE HQ newsletter. It is unticked unless you tick it. You can also sign up on our website. You can unsubscribe at any time by replying to any of our emails, and every newsletter includes an unsubscribe link.

Anonymous usage counts carry nothing that identifies you, so there is nothing in them to delete. We do not profile you, and we make no automated decisions about you.

Website

This site sets no cookies and loads nothing from anyone else.

We don’t track you across other websites and we don’t run advertising, so there is nothing for a Do Not Track signal to switch off. If you are in the United States, including California: we do not sell or share your personal information, and you can ask to see or delete what we hold by emailing support@theodorehq.com.

Suppliers

• Polar (United States) sells Loop as Merchant of Record and acts as an independent controller for its checkout. Payments go through Stripe; we never see your card.
• Vercel (United States) hosts this website and our Support Centre, which receives crash reports.
• Hostinger (United Kingdom) hosts the server that receives the anonymous usage counts.

Where a supplier is outside the UK, an approved UK transfer safeguard is in place.

Your Rights

Under UK GDPR you can ask to see, correct, delete, restrict or move what we hold, or object to how we use it. Email support@theodorehq.com and we will answer within thirty days, free of charge.

Complaints

If you are unhappy with how we have handled your personal data, you can complain to us directly, a right under section 164A of the Data Protection Act 2018. Email support@theodorehq.com and we will acknowledge it within 30 days, look into it, and tell you the outcome.

You can also complain to the UK Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, on 0303 123 1113, or at ico.org.uk/make-a-complaint, though we would like the chance to put things right first.

Children

Loop is not directed at children under 13, the UK age of digital consent under section 9 of the Data Protection Act 2018. We do not knowingly collect personal data from anyone under 13. If you believe we hold any in error, email us and we will delete it promptly.

Changes

If we change this policy we will update the date at the top. For any change that materially affects you, we will email customers a plain-English summary at least fourteen days before it takes effect. We will not start collecting more from existing customers.

Contact

Any question at all, write to support@theodorehq.com. Every message is read by a person. See also our Terms.