Privacy statement (draft)
Who is responsible
LoopCraft is run by [company name, address, registration number, e-mail address for privacy questions]. We are the controller of the personal data described here.
What we store about you
Account: your name, e-mail address, a salted hash of your password (never the password itself), what you chose for “I am a…”, the organisation if you gave one, the time you accepted the terms and which version, and whether you ticked the box for product updates.
Your projects: the plants you save in your account, exactly as you built them.
Usage events: when you sign up, confirm your e-mail address, sign in, create or save a project, or start a simulation. An event holds a time, its type and your account number, and at most the number of a project. It holds no name, e-mail address, IP address or browser details. We use these events to understand whether LoopCraft is useful and to improve it.
Sign-in sessions: while you are signed in we keep a session record with its expiry time, your IP address and your browser type, so that we can keep your session secure. It is deleted when you sign out, when it expires or when you delete your account.
Rate limiting: to stop password guessing we briefly keep the IP address and the time of recent sign-in and e-mail requests. These records are deleted after at most 24 hours.
Server logs: [to be confirmed with the hosting provider: what is logged, for how long].
Why, and on what legal basis
To give you the service you registered for (account, projects, sign-in, e-mails that confirm your address or reset your password): performance of a contract (GDPR art. 6(1)(b)).
To keep the service secure and to understand how it is used, with first-party usage events and rate limiting: our legitimate interest (art. 6(1)(f)).
To send you news about LoopCraft updates: only if you ticked the separate box, so on your consent (art. 6(1)(a)). You can withdraw it at any time. [Describe how, once the e-mail feature exists.]
Cookies
LoopCraft sets one cookie: the session cookie that keeps you signed in. It is strictly necessary, so it needs no consent banner. We use no advertising, analytics or tracking cookies and no third-party trackers. We host our own fonts.
Your theme choice (light or dark) is saved in your browser’s local storage on your own device and is never sent to us.
Who else handles your data
We use only providers in the European Union, under data processing agreements: [Scalingo SAS (France)] for hosting and the managed PostgreSQL database, and [Brevo (France) or Scaleway (France)] for sending e-mails such as the confirmation link. Your data is not transferred outside the EU/EEA. [To be confirmed per provider.]
We do not sell your data and do not share it with anyone else.
How long we keep it
Your account and projects: until you delete your account. Usage events: anonymised when you delete your account, then kept [period to be decided] for product statistics. Sessions: until they expire (14 days) or you sign out. Backups: [retention to be confirmed with the hosting provider].
Your rights
You can download all the data we hold about you at any time (menu “Account”, “Download my data”), and you can delete your account yourself (“Delete my account”). Deleting removes your account, sign-in, sessions and projects; usage events are kept without any link to you.
You also have the right to access, correct and restrict the processing of your data, to object to it, and to complain to the supervisory authority ([Datatilsynet in Denmark, or your own country’s authority]). Write to [privacy e-mail address].