Privacy Policy

Last updated: 2026-10-18 · Version: v1.1

Loopback Audio ("we," "us," "our," or "Loopback") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why, how we use it, and what rights you have over it.

By using loopbackaudio.com (the "Site") or purchasing our product, you agree to the practices described in this policy.

GDPR Compliant CCPA Compliant No data selling v1.1 (2026-10-18)

Plain-English summary: We don't collect personal data beyond what you give us (email, address for orders). No third-party tracking cookies, no analytics on your activity, no data selling. You can request a copy of your data or delete your account anytime.

1. Who We Are

Loopback Audio is the data controller for the personal data described in this policy.

  • Website: https://loopbackaudio.com
  • Contact: privacy@loopbackaudio.com
  • Mailing address: Loopback Audio, [TODO_LEGAL_ADDRESS]

For users in the European Economic Area, UK, or Switzerland, we are the data controller under the GDPR. If you would like to contact our EU/UK representative, email privacy@loopbackaudio.com.


2. Information We Collect

We collect only the data we need to run our business. Here's a full breakdown.

2.1 Information You Give Us

When you pre-order, contact us, or sign up for updates, you may provide:

  • Name (required for shipping)
  • Email address (for order confirmation, shipping notifications, support)
  • Shipping address (street, city, state/province, postal code, country)
  • Phone number (optional, only used by the carrier for delivery)
  • Billing information (processed by our payment processor — see Section 4)
  • Support emails — any data you include in messages to support@loopbackaudio.com

2.2 Information Collected Automatically

When you visit the Site, we collect:

  • Pages visited and time on page
  • Referring URL (the website you came from)
  • Browser type and version (for compatibility)
  • Device type (desktop / mobile / tablet)
  • Country and city (derived from IP, then discarded — see below)
  • Theme preference (dark / light mode, stored in a first-party cookie)

We use privacy-respecting analytics that do not require consent under GDPR:

  • No persistent cross-site tracking
  • No IP address storage (IPs are truncated before processing)
  • No advertising cookies
  • No data sale or sharing

2.3 Information We Do NOT Collect

  • We do not collect biometric data
  • We do not use facial recognition
  • We do not track you across other websites
  • We do not collect precise geolocation
  • We do not access your device's microphone, camera, contacts, or files

2.4 Cookies We Use

Cookie name Purpose Type Duration
quark2-theme Remember dark/light theme preference First-party functional 1 year
cart (if applicable) Remember items in cart First-party functional 30 days
__cf_bm (Cloudflare Bot Mgmt) Distinguish humans from bots Security 30 minutes

We do not use Google Analytics, Facebook Pixel, or any advertising cookies.


3. How We Use Your Data (Legal Basis)

We process your data under one of these legal bases, depending on the activity:

Purpose Legal basis
Process and ship your order Performance of a contract
Send order updates and shipping notifications Performance of a contract
Respond to support requests Performance of a contract + legitimate interest
Prevent fraud and abuse Legitimate interest
Improve the Site (via aggregate analytics) Legitimate interest
Send marketing emails (if you opted in) Consent (you can withdraw at any time)
Comply with tax / accounting law Legal obligation

We never sell your data. We do not share it with third parties for their own marketing purposes.


4. Third-Party Processors

To run our business, we share limited data with these service providers. Each is contractually required to protect your data and use it only for the service they provide.

Service What they do Data shared
Stripe (or Shopify Payments) Process credit card payments Name, email, billing address, card token (we never see full card numbers)
Shipping carrier (USPS / UPS / DHL / FedEx) Ship your order Name, shipping address, phone (if provided)
Email provider (Postmark / SendGrid) Send transactional emails Email, name, order details
Hosting (DreamHost) Host the website Server logs (no personal data unless you submitted it)
Cloudflare CDN + DDoS protection Truncated IP, request metadata

Each of these has their own privacy policy. We are not responsible for their practices, but we choose providers that meet or exceed our privacy standards.


5. Your Rights

5.1 For Everyone

  • Access — Request a copy of all personal data we hold about you
  • Correct — Fix inaccurate data
  • Delete — Request deletion of your data ("right to be forgotten")
  • Withdraw consent — At any time, for processing based on consent (e.g., marketing emails)
  • Object — To processing based on legitimate interest

5.2 For EU / UK / Swiss Residents (GDPR)

You also have the right to:

  • Data portability — Receive your data in a machine-readable format
  • Restrict processing — In certain circumstances
  • Lodge a complaint — With your local data protection authority

5.3 For California Residents (CCPA / CPRA)

You have the right to:

  • Know what categories of personal information we collect and how we use them
  • Delete personal information we have collected
  • Opt out of sale or sharing — We do not sell or share your personal information, so this does not apply, but you have the right
  • Non-discrimination — We will not deny service or charge a different price for exercising your rights
  • Limit use of sensitive personal information — We do not collect sensitive personal information

To exercise any of these rights, email privacy@loopbackaudio.com. We respond within 30 days (45 days for complex requests, as permitted by GDPR).


6. Data Retention

We keep your data only as long as needed for the purposes described in this policy, then delete or anonymize it.

Data Retention period Reason
Order data (name, address, items) 7 years Tax / accounting legal requirement
Support emails 2 years Quality and training
Analytics 24 months aggregated, then deleted Site improvement
Account data Until you request deletion Service provision
Marketing email subscription Until you unsubscribe Consent

After the retention period, data is either deleted or anonymized (aggregated) so it can no longer identify you.


7. Children's Privacy

Loopback Audio is not intended for children under 13 (or 16 in the EU/UK). We do not knowingly collect personal data from children.

If you are a parent and believe your child has provided data to us, contact privacy@loopbackaudio.com and we will delete it.


8. International Data Transfers

We are based in the United States. If you are in the EU, UK, or another region with cross-border data rules:

  • We use Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers
  • We work only with providers that store data in compliant jurisdictions
  • For more detail on our transfer mechanisms, email privacy@loopbackaudio.com

9. Security

We protect your data with industry-standard measures:

  • HTTPS / TLS 1.2+ for all data in transit
  • Encrypted database storage (at-rest encryption)
  • Limited access — only authorized personnel can access personal data, on a need-to-know basis
  • Regular backups stored encrypted
  • Security audits of our providers

No system is 100% secure. If a breach affects you, we will notify you within 72 hours as required by GDPR.


10. "Do Not Track" Signals

Some browsers offer a "Do Not Track" (DNT) feature. We honor DNT signals and do not track, plant cookies, or use tracking when a DNT signal is received.


11. Changes to This Policy

If we make material changes, we will:

  • Email existing customers at least 30 days before the change takes effect
  • Post a notice on our homepage
  • Update the "Last updated" date and version number above

Continued use of the Site after the effective date constitutes acceptance of the new policy.


12. Contact

For any privacy question, request, or complaint:

If you are in the EU/UK and unsatisfied with our response, you may lodge a complaint with your local data protection authority.


This policy is provided as a starting point. Loopback Audio recommends having a qualified attorney review this document before commercial launch.