Privacy Policy
Last updated: 2026-10-18 · Version: v1.1
Loopback Audio ("we," "us," "our," or "Loopback") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why, how we use it, and what rights you have over it.
By using loopbackaudio.com (the "Site") or purchasing our product, you agree to the practices described in this policy.
GDPR Compliant CCPA Compliant No data selling v1.1 (2026-10-18)
1. Who We Are
Loopback Audio is the data controller for the personal data described in this policy.
- Website: https://loopbackaudio.com
- Contact: privacy@loopbackaudio.com
- Mailing address: Loopback Audio, [TODO_LEGAL_ADDRESS]
For users in the European Economic Area, UK, or Switzerland, we are the data controller under the GDPR. If you would like to contact our EU/UK representative, email privacy@loopbackaudio.com.
2. Information We Collect
We collect only the data we need to run our business. Here's a full breakdown.
2.1 Information You Give Us
When you pre-order, contact us, or sign up for updates, you may provide:
- Name (required for shipping)
- Email address (for order confirmation, shipping notifications, support)
- Shipping address (street, city, state/province, postal code, country)
- Phone number (optional, only used by the carrier for delivery)
- Billing information (processed by our payment processor — see Section 4)
- Support emails — any data you include in messages to support@loopbackaudio.com
2.2 Information Collected Automatically
When you visit the Site, we collect:
- Pages visited and time on page
- Referring URL (the website you came from)
- Browser type and version (for compatibility)
- Device type (desktop / mobile / tablet)
- Country and city (derived from IP, then discarded — see below)
- Theme preference (dark / light mode, stored in a first-party cookie)
We use privacy-respecting analytics that do not require consent under GDPR:
- No persistent cross-site tracking
- No IP address storage (IPs are truncated before processing)
- No advertising cookies
- No data sale or sharing
2.3 Information We Do NOT Collect
- We do not collect biometric data
- We do not use facial recognition
- We do not track you across other websites
- We do not collect precise geolocation
- We do not access your device's microphone, camera, contacts, or files
2.4 Cookies We Use
| Cookie name | Purpose | Type | Duration |
|---|---|---|---|
quark2-theme |
Remember dark/light theme preference | First-party functional | 1 year |
cart (if applicable) |
Remember items in cart | First-party functional | 30 days |
__cf_bm (Cloudflare Bot Mgmt) |
Distinguish humans from bots | Security | 30 minutes |
We do not use Google Analytics, Facebook Pixel, or any advertising cookies.
3. How We Use Your Data (Legal Basis)
We process your data under one of these legal bases, depending on the activity:
| Purpose | Legal basis |
|---|---|
| Process and ship your order | Performance of a contract |
| Send order updates and shipping notifications | Performance of a contract |
| Respond to support requests | Performance of a contract + legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
| Improve the Site (via aggregate analytics) | Legitimate interest |
| Send marketing emails (if you opted in) | Consent (you can withdraw at any time) |
| Comply with tax / accounting law | Legal obligation |
We never sell your data. We do not share it with third parties for their own marketing purposes.
4. Third-Party Processors
To run our business, we share limited data with these service providers. Each is contractually required to protect your data and use it only for the service they provide.
| Service | What they do | Data shared |
|---|---|---|
| Stripe (or Shopify Payments) | Process credit card payments | Name, email, billing address, card token (we never see full card numbers) |
| Shipping carrier (USPS / UPS / DHL / FedEx) | Ship your order | Name, shipping address, phone (if provided) |
| Email provider (Postmark / SendGrid) | Send transactional emails | Email, name, order details |
| Hosting (DreamHost) | Host the website | Server logs (no personal data unless you submitted it) |
| Cloudflare | CDN + DDoS protection | Truncated IP, request metadata |
Each of these has their own privacy policy. We are not responsible for their practices, but we choose providers that meet or exceed our privacy standards.
5. Your Rights
5.1 For Everyone
- Access — Request a copy of all personal data we hold about you
- Correct — Fix inaccurate data
- Delete — Request deletion of your data ("right to be forgotten")
- Withdraw consent — At any time, for processing based on consent (e.g., marketing emails)
- Object — To processing based on legitimate interest
5.2 For EU / UK / Swiss Residents (GDPR)
You also have the right to:
- Data portability — Receive your data in a machine-readable format
- Restrict processing — In certain circumstances
- Lodge a complaint — With your local data protection authority
5.3 For California Residents (CCPA / CPRA)
You have the right to:
- Know what categories of personal information we collect and how we use them
- Delete personal information we have collected
- Opt out of sale or sharing — We do not sell or share your personal information, so this does not apply, but you have the right
- Non-discrimination — We will not deny service or charge a different price for exercising your rights
- Limit use of sensitive personal information — We do not collect sensitive personal information
To exercise any of these rights, email privacy@loopbackaudio.com. We respond within 30 days (45 days for complex requests, as permitted by GDPR).
6. Data Retention
We keep your data only as long as needed for the purposes described in this policy, then delete or anonymize it.
| Data | Retention period | Reason |
|---|---|---|
| Order data (name, address, items) | 7 years | Tax / accounting legal requirement |
| Support emails | 2 years | Quality and training |
| Analytics | 24 months aggregated, then deleted | Site improvement |
| Account data | Until you request deletion | Service provision |
| Marketing email subscription | Until you unsubscribe | Consent |
After the retention period, data is either deleted or anonymized (aggregated) so it can no longer identify you.
7. Children's Privacy
Loopback Audio is not intended for children under 13 (or 16 in the EU/UK). We do not knowingly collect personal data from children.
If you are a parent and believe your child has provided data to us, contact privacy@loopbackaudio.com and we will delete it.
8. International Data Transfers
We are based in the United States. If you are in the EU, UK, or another region with cross-border data rules:
- We use Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers
- We work only with providers that store data in compliant jurisdictions
- For more detail on our transfer mechanisms, email privacy@loopbackaudio.com
9. Security
We protect your data with industry-standard measures:
- HTTPS / TLS 1.2+ for all data in transit
- Encrypted database storage (at-rest encryption)
- Limited access — only authorized personnel can access personal data, on a need-to-know basis
- Regular backups stored encrypted
- Security audits of our providers
No system is 100% secure. If a breach affects you, we will notify you within 72 hours as required by GDPR.
10. "Do Not Track" Signals
Some browsers offer a "Do Not Track" (DNT) feature. We honor DNT signals and do not track, plant cookies, or use tracking when a DNT signal is received.
11. Changes to This Policy
If we make material changes, we will:
- Email existing customers at least 30 days before the change takes effect
- Post a notice on our homepage
- Update the "Last updated" date and version number above
Continued use of the Site after the effective date constitutes acceptance of the new policy.
12. Contact
For any privacy question, request, or complaint:
- Email: privacy@loopbackaudio.com
- Mailing: Loopback Audio, [TODO_LEGAL_ADDRESS]
- Response time: within 30 days
If you are in the EU/UK and unsatisfied with our response, you may lodge a complaint with your local data protection authority.
This policy is provided as a starting point. Loopback Audio recommends having a qualified attorney review this document before commercial launch.