Privacy

This page is run by Erik Schäfer, colur, Switzerland. Write to hello@loomux.dev about anything on this page.

The waitlist

When you join the waitlist I store your email address, the operating system you picked and the time you signed up. No mail is sent when you join. I use the address for one thing: a mail when your download is ready.

To catch typos, the page asks Cloudflare's public DNS service whether the domain of your address exists. Only the domain goes there, for example "example.com", never the address. That later mail will go out through Resend (resend.com, USA), which sees your address while it delivers it. The list itself is stored at Cloudflare. I do not pass your address to anyone else.

Write to hello@loomux.dev and I delete your entry.

Mail

For 180 days I keep a log of every mail I send: the address, the kind of mail, the subject, the time, whether it arrived and, if sending failed, the error. The log holds none of the links or codes from the mail.

If you write to hello@loomux.dev, I store your mail at Cloudflare so I can read and answer it: your address and name, the subject, the text, the time, the technical ids of the mail, the result of the sender checks, and the names, types and sizes of attachments, not the attachments themselves. My answer is stored next to it. I keep it until I delete it, and I delete it when you ask. This lives in its own database, separate from the waitlist and the visit counts below, and nothing links them.

Only I can open this. The page for it needs a password and a code. Every attempt to sign in there is logged for 365 days with the IP address it came from, and so is what I do there (sign in, export, delete, reply). An entry names an address only by its first letter and its domain.

Counting visits

This happens only if you press Accept in the cookie note. Then the page sets one cookie, loomux_visitor. It holds a random number that is not tied to your name, your email address or your IP address. The cookie belongs to loomux.dev, is never sent to another site, is only sent over HTTPS and stays in your browser for 13 months. If you press Decline, or leave the note unanswered, no cookie is set and nothing is counted.

With the cookie, each visit stores this on my server:

• the day and the random number
• which of three pages you opened: the front page, Privacy or Imprint. No other page name is kept, and nothing that follows it in the address
• the website you came from, by name only
• your country, which Cloudflare works out from your IP address
• whether you use a phone, a tablet or a computer, and the names of your operating system and browser
• how often you opened that page that day, the time of your last view, and whether it was your first day

I do not store the IP address, and I do not store what your browser says about itself, only those three names.

It also stores a short note with the time when you use something on the page:

• you join the waitlist: the system you picked
• you change the look: which one
• you click into a preview window: which one, once each time the page loads
• you start agents in the launcher: which preview, not what you typed
• you click a link to another site: that site's name

The same kind of note is kept once a day for you. No note carries an email address.

Visits and notes are deleted after 13 months (395 days). Nothing from this goes to other companies.

To withdraw, press "Cookies" in the footer and choose Decline. That deletes the cookie at once. After that I can no longer tell which rows were yours, so I cannot look them up or delete them for you. They go away on their own after 13 months. If your browser sends the Global Privacy Control signal, the page treats it as Decline until you press Accept yourself. The note asks again after six months.

Keeping abuse out

The server keeps short counters to stop floods of requests. For the visit counting they hold a scrambled value made from your network (for IPv6 only the first half of the address) and a secret, never the address. They also cap how many visits and notes are recorded in an hour. For the waitlist the counters hold your IP address itself. All counters are deleted within two days, most within two hours.

In your browser

Besides that cookie the page keeps three things in your browser's own storage: the look you picked, whether sound is on, and your answer to the cookie note with its date. They stay on your computer and are not sent anywhere.

Where it runs

The page, the waitlist and the numbers above run on Cloudflare. Cloudflare sees your IP address when your browser loads the page, as every web host does. There is no advertising on this page and no analytics from other companies.

The live preview has a browser tab. If you open it, your browser loads google.com from Google, and Google sees your IP address. Nothing is loaded from Google before you open that tab.

Your rights

You can ask what I have stored about you, have it corrected or have it deleted. You can take back your consent to the cookie at any time, as described above. Swiss data protection law (revFADP) applies, and the GDPR where it covers you.