Privacy policy

The short version

• The LoopList script counts real visits to member sites. It sets no cookies and never records what people type.
• IP addresses are scrambled with a code that changes every day, so we can't follow anyone from one day to the next.
• We only email you the newsletter if you ticked the box asking for it. Every email has a one-click unsubscribe link.
• We don't sell data, and we don't run ads.

If you're a member

When you sign up we keep your email address, the listings you add (name, address, description, categories, images) and your settings. We use your email to send sign-in codes, account notices (for example about a link exchange or a report on your listing), and the newsletter if you asked for it.

We record when you agreed to the newsletter and where (the sign-up form or your settings), so we can show you gave consent. If you unsubscribe we record that too, and stop sending it.

What the script on member sites collects

Member sites add a small LoopList script. It runs when someone arrives through a LoopList link, or views a LoopList widget, so we can tell real people from bots and give fair credit. It checks a changing mix of signals like time on the page and whether the page was scrolled, and sends back totals and a score, not a recording.

• It never collects what people type, form contents, or a trace of mouse movements.
• It sets no cookies and doesn't use local storage to track people.
• The visitor's IP address and browser type are turned into a one-way code (a hash) mixed with a secret that changes every day. We store the code, not the address.
• If a browser sends Do Not Track or Global Privacy Control, we only count the click, and delete the check that stops it being counted twice within 48 hours.

How long we keep things

• Per-visitor checks used to stop double counting: deleted after 2 days (48 hours for clicks).
• Individual visit and click records (score, time, the scrambled visitor code): deleted after 30 days.
• Daily view totals per listing: kept for about 13 months, then deleted. Running totals on your listing (like clicks given and received) are kept while the listing exists.
• Your account and listings: until you delete them or ask us to.
• Reports about listings: kept while they're reviewed, and for up to 12 months after as a record of what we did.
• Database backups: one a day, each deleted after 30 days.

Who processes data for us

LoopList runs on Cloudflare (Workers, D1 database, R2 storage), which hosts the site and stores the data on our behalf. Email is delivered by Resend. Both act only on our instructions. Data may be processed in countries other than yours.

Deleting your data

You can delete any listing yourself from My properties, and it's removed straight away. To delete your whole account, or to ask what we hold about you, email helixdata@gmail.com from the address on your account. We'll do it within 30 days. Copies in backups disappear as those backups expire, within 30 days.

Visitors to member sites: we can't link the scrambled codes back to you, which is the point. If you have a question anyway, email helixdata@gmail.com.

Changes

If we change this policy in a way that matters, we'll update the date at the top and tell members by email.

Who we are

LoopList is run by Helix Data Solutions Limited, a company registered in New Zealand. We're the operator of LoopList and the data controller for the personal data described in our privacy policy.

Registered address: 51 Morrison Drive, Warkworth 0910, New Zealand
Postal address: PO Box 575, Warkworth 0941, New Zealand
Email: helixdata@gmail.com