This policy explains what data tubeloops (“we”) collects, why, and your choices. tubeloops is operated by an individual. If you have questions, contact us at the address below.
What we collect
- Account info. If you sign in with Google, we receive your name, email address, and profile image. Sign-in is handled by Google OAuth — we never see or store your Google password. We do store the OAuth tokens Google issues so you stay signed in.
- Session & technical data. When you’re signed in we store session records that include your IP address and browser user-agent. Our host (Cloudflare) also processes IP addresses and request metadata to deliver and secure the site.
- Content you create. The loop-sets, loops, titles, descriptions, and tags you save while signed in.
- Waitlist. If you join the creators waitlist, we store the email address you submit so we can contact you about access.
- Loops saved while signed out. If you use the looper without an account, your loop-sets are stored only in your browser (localStorage). They are not sent to us until you create an account and choose to import them.
How we use data & our legal basis
We use account, session, and content data to provide the service — creating your account, keeping you signed in, and saving and displaying your loop-sets (legal basis: performance of our agreement with you). We use waitlist emails to contact you about access (legal basis: your consent / our legitimate interest). We use analytics to improve the product (legal basis: your consent, where required).
Cookies & analytics
We use Microsoft Clarity, which records individual sessions (replay of clicks, scrolling, and on-screen activity) and builds heatmaps to help us understand and improve the site, and Google Analytics, which reports aggregate traffic and usage. These tools set cookies and may capture your IP address.
We load these analytics only after you opt in through our cookie-consent banner — they do not run until you click Accept, and you can decline or withdraw consent at any time by clearing the site’s storage. Essential cookies needed to run the site are always active.
Other data shared with Google when you browse
Because the site embeds YouTube and uses Google services, your browser contacts Google directly in a few places: the YouTube player and video thumbnails load from Google’s servers, and our fonts currently load from Google Fonts. These requests send your IP address and the page you’re on to Google, governed by Google’s Privacy Policy. Watching a video is also subject to the YouTube Terms of Service.
Third parties we rely on
- Google — sign-in (OAuth), the embedded YouTube player, thumbnails, and fonts.
- Microsoft — Clarity analytics (heatmaps + session recordings).
- Cloudflare — hosting and our database, which holds your account and loop-sets.
We don’t sell your personal data.
International transfers
We’re based in the United States and our providers (Google, Microsoft, Cloudflare) process data in the US and elsewhere. Where data is transferred from the EU/UK, it relies on the providers’ standard safeguards (Standard Contractual Clauses and/or the EU-US Data Privacy Framework).
How long we keep data
We keep your account and loop-sets until you delete them or close your account; after account deletion we remove your data within a reasonable period, except where we must keep it to meet legal obligations. Clarity data is retained per Microsoft’s policy. Loop-sets saved while signed out live only in your browser until you clear it.
Your rights
Depending on where you live (e.g. the EU/UK under GDPR, or California under the CPRA), you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent. EU/UK users may also complain to their data-protection authority. To exercise any of these, contact us below.
Children
tubeloops is intended for users aged 16 and over and is not directed to children. We do not knowingly collect personal data from anyone under 16. The only information the public can submit is a waitlist email address, and joining the waitlist requires confirming you meet the minimum age. If you believe someone under 16 has provided us data, contact us at privacy@tubeloops.com and we will delete it. If you are under 18, please use tubeloops only with a parent or guardian’s involvement.
Security
Data is encrypted in transit, sign-in is delegated to Google (we never store passwords), and access to your data is restricted. No service can promise perfect security. If a breach affects your personal data, we’ll notify affected users and any authority as required by law.
Changes
We may update this policy; material changes will be posted here with a new date, and where required we’ll notify you.
Contact
Questions or requests about your data — including access, correction, or deletion — can be sent to privacy@tubeloops.com. We aim to respond within 30 days (GDPR) or 45 days (CCPA/CPRA), and will tell you if we need more time as the law allows.
If you are in the EU or UK, you can contact us about your rights at the same address. Given the limited, consent-based nature of our processing, we have not appointed a representative under Article 27 of the GDPR / UK GDPR; we keep this under review and will appoint one if our processing of EU/UK personal data expands.