Privacy policy
Last updated: September 22, 2026. This explains what Loopfunder ("we", "us") collects when you use loopfunder.com, why, who else sees it, and how to get it changed or deleted. It's written to be read. If something is unclear, write to support@loopfunder.com and we'll answer and fix the wording.
- Accounts go through Clerk (email, and GitHub login if you link it). Card data stays with Stripe; we store the pledge amount, not the last four digits.
- Campaign content and uploaded media live in Supabase storage. Run telemetry (captures, agent activity log, per-round spend) is published publicly. That is the product.
- Your name appears on the backer wall only if you opt in at checkout.
- We use PostHog for product analytics and Google Analytics 4 for aggregate traffic measurement. We use the Meta Pixel to measure our ads on Facebook and Instagram, and the Pinterest tag to measure our ads on Pinterest. Turn on Global Privacy Control or Do Not Track and none of these load.
- Email support@loopfunder.com to see, correct, or delete your data.
1. What we collect
| Data | When | From |
|---|---|---|
| Account: email address, name, avatar, and a GitHub login if you link one. Held by Clerk. | When you create an account or sign in | You, via Clerk |
| GitHub connection: your GitHub username and a token scoped to create repositories and releases | When a creator connects GitHub | GitHub, with your consent |
| Payment: the pledge amount, billing country, and a Stripe customer and payment identifier. We do not store the last four digits of your card. Stripe holds the card data. | When you back a project | Stripe |
| Receipt email: the email you give at checkout | When you back a project | You |
| Backer wall opt-in: whether you chose to show your name on the project | When you back a project | You |
| Campaign content: title, pitch, goal, bar, and uploaded media (pitch video, poster, reference frames), stored in Supabase storage | When you create or edit a project | You |
| Run telemetry: captures, the build log, each version's review results and what it cost. Published publicly. | While a run is active | The build tools |
| Nudges: notes a creator sends to the machine | During a run | You |
| Support mail: what you write to us and the address you write from | When you email us | You, via Resend |
| Server logs: IP address, browser, pages requested, timestamps, errors | Every request | Vercel |
We advertise on Facebook, Instagram, and Pinterest. To measure those ads we use the Meta Pixel and Meta's Conversions API, and the Pinterest tag, which tell Meta and Pinterest when someone visits loopfunder.com, starts a project, or creates an account. Both hash any email address before it leaves your browser. We do not buy data about you from anyone. Product analytics go through PostHog and aggregate traffic measurement through Google Analytics 4; neither creates an advertising profile.
2. Why we collect it
- To run the service: sign you in, show you your dashboard, take a payment, start a run, send a receipt, issue a refund. This is performance of our contract with you.
- To keep the record honest: the spend meter, the judging, and the public run history exist so backers can see where the money went. This is the product.
- To see how the site is used: PostHog records page views and events so we can tell what breaks. This is our legitimate interest.
- To measure our ads: the Meta Pixel and Conversions API report page views, project starts, and new accounts to Meta, and the Pinterest tag reports the same to Pinterest, so we can see which ads work and show them to people likely to find Loopfunder useful. Pinterest's automatic enhanced match also sends Pinterest a hashed, irreversible copy of contact details you type into a form here, which in practice means your email address when you sign in; Pinterest uses it only to match a conversion to an account, and it cannot read the address back out. This is our legitimate interest. Turning on Global Privacy Control or Do Not Track opts you out.
- To protect the site and the machine: rate limiting, fraud checks by Stripe, abuse investigation. This is our legitimate interest and, for payments, a legal obligation.
- To talk to you: receipts, refund notices, run-ended notices, replies to support mail, and notices about changes to terms. We do not send marketing email unless you ask for it, and every marketing email, if we ever send one, has an unsubscribe link.
- To meet the law: tax and payment records, responding to lawful requests.
3. What is public by design
Loopfunder only works if the work is visible. For every project, the following are public on loopfunder.com and in the project's GitHub repository, permanently: the title, pitch, category, goal, public reference material, the creator's display name (if they chose to show it) and their GitHub username (because the repository is under it), and run telemetry: every version's headline, captures and review results, what each version cost, and the build log, plus the code and the releases. Do not put personal information you don't want public in a goal, a nudge, a pitch, or a public reference.
Your name appears on the backer wall only if you opt in at checkout. The project page always shows the total raised and the number of backers. The amount you paid is visible only to you, on your receipt, unless you chose to show your name.
Reference material a creator marks private is stored privately and used only by the build tools and their reviews.
4. Who else sees it
We use a small number of providers to run the site. Each receives only what it needs for its job:
| Provider | Job | What they get |
|---|---|---|
| Clerk | Sign-in and accounts | Email, name, avatar, OAuth identifiers, session cookies |
| Stripe | Payments and refunds | Card details (directly from your browser, not via us), amount, email, billing country |
| Supabase | Database and file storage | Project content, run records, ledger entries, uploaded media |
| Vercel | Hosting the site and its functions | Server logs, request data |
| OpenRouter and the model providers it routes to | Running the AI models | The project's goal, references, code, and nudges. No account or payment data. See section 5. |
| The sandbox provider (E2B or Daytona) | Hosting the isolated machine a run executes in | The repository and run files while the run is active |
| GitHub | Publishing the repository and releases | The code, releases, and the creator's account connection |
| Resend | Sending receipts and notices, receiving support mail | Your email address and the contents of the mail |
| PostHog | Product analytics | Page views, events, and a distinct id. No card data. No advertising profile. |
| Google Analytics 4 | Aggregate traffic measurement | Page views, device and referrer information. No card data or advertising profile. |
| Meta (Facebook and Instagram) | Measuring our ads | Page views, a project-started event, and a new-account event with your email and account id in hashed (SHA-256) form, your browser and IP address, and Meta's own cookie identifiers. Not your project content or payment data. |
We share data beyond this list only when the law requires it, to protect someone's safety, to enforce our terms, or if Loopfunder is acquired or merged, in which case this policy continues to apply to data collected under it. We do not sell personal data and we have not in the past. Sending ad-measurement events to Meta may count as "sharing" under California law; see section 8.
5. What the AI sees
During a run, the models receive the creator's goal, the reference material (public and private), the repository as it evolves, the review results, and any notes. This content is sent to model providers through OpenRouter under its terms, which as of this writing route to providers with a no-training, limited-retention policy where available. Model providers may retain prompts briefly for abuse monitoring. The models never receive your account details, email, payment information, or IP address. Do not put personal information in a goal, a nudge, or a reference unless you are comfortable with model providers processing it.
6. Cookies
Our own cookies are session-only, for sign-in. Clerk sets a session cookie when you log in, and a short-lived cookie to protect against cross-site request forgery. Stripe sets cookies on its own checkout pages for fraud prevention. The Meta Pixel sets an advertising cookie (_fbp, and _fbc when you arrive from a Meta ad) that Meta uses to measure our ads, and the Pinterest tag sets its own (_pin_unauth, and _epik when you arrive from a Pinterest ad); neither loads if Global Privacy Control or Do Not Track is on. PostHog and Google Analytics 4 record product and aggregate traffic analytics without an advertising cookie. Blocking cookies will stop sign-in from working; backing a project without an account still works.
7. How long we keep it
| Data | Kept |
|---|---|
| Account | Until you delete it, then removed within 30 days |
| Payment and refund records | 7 years, for tax and payment-dispute law. Stripe keeps its own records under its policy. |
| Receipt email | With the payment record |
| Project content and run records | Public runs are kept indefinitely because backers paid for them to be public. Drafts that were never launched are deleted with your account or on request. |
| Private reference material | Until the project is deleted or 12 months after the run ends, whichever comes first, unless the creator asks us to keep it |
| Support mail | 2 years |
| Server logs | 30 days |
| PostHog events | 13 months, then dropped |
| Meta ad-measurement events | Held by Meta under its own terms |
8. Your rights
Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, give you a copy in a usable format, or stop processing it for a particular purpose. Email support@loopfunder.com from the address on your account and we will act within 30 days. Two limits: we cannot delete payment records the law requires us to keep, and we cannot remove the public record of a run you created and backers paid for, though we can remove your display name from it.
If you are in the European Economic Area, the UK, or Switzerland: our legal bases are contract (running the service, receipts, refunds), legitimate interest (keeping the public record, protecting the machine, PostHog analytics, ad measurement), and legal obligation (tax and payment records). You have the right to complain to your local data protection authority. If you are in California: we do not sell personal information. Sending ad-measurement events to Meta or Pinterest may count as "sharing" for cross-context behavioral advertising under the CCPA. To opt out, turn on Global Privacy Control in your browser (we treat it as an opt-out and load neither the Meta Pixel nor the Pinterest tag) or email support@loopfunder.com. We do not discriminate against you for exercising your rights.
9. Security
Data moves over TLS. Card data never touches our servers. Access to our database and storage is limited to the people who run Loopfunder and protected by per-person credentials. The machine a run executes in is isolated from the site, holds only a spending key capped at that run's pot, and cannot reach the database. No system is perfectly secure; if we learn of a breach affecting your data we will tell you and the relevant authorities as the law requires, and in any case as fast as we can.
10. Where data lives
Our providers store data in the United States. If you use Loopfunder from elsewhere, your data is transferred to and processed in the US. Where the law requires a transfer mechanism, we rely on our providers' standard contractual clauses and data processing agreements.
11. Children
Loopfunder is for adults. You must be 18 or older to back or create a project. We do not knowingly collect data from anyone under 18; if you believe we have, email us and we will delete it.
12. Changes
When this policy changes, the date at the top changes. For changes that matter, we email account holders and post a notice on the site at least 14 days before they take effect. Past versions are available on request.
13. Contact
Loopfunder
support@loopfunder.com
loopfunder.com