Privacy policy

LOOPTAG PRIVACY POLICY

Effective Date: May 20, 2026

This Privacy Policy explains how LoopTag LLC ("LoopTag," "we," "our," or "us") collects, uses, stores, and protects information when you use our websites, products, and services, including https://looptag.co and https://mylooptag.com (collectively, the "Service").

LoopTag is a limited-purpose communication platform designed to facilitate the return of lost property. By using the Service, you agree to this Privacy Policy.

For purposes of the General Data Protection Regulation (GDPR) and similar data protection laws, LoopTag LLC acts as the data controller of your personal information, where applicable.

1. Information We Collect

Account Information. When you create an account, we collect your name, email address, password credentials, phone number, account preferences, tag registration information, and verification information. Phone numbers may be collected for account verification, shipment notifications, or related operational purposes.

Tag Information. We collect information associated with registered LoopTags, including tag IDs, registration status, activation records, associated item descriptions (if provided), and conversation history related to a tag.

Finder Information. People who scan a LoopTag ("Finders") are not required to create an account. When a Finder interacts with the Service, we collect messages submitted through the platform, uploaded images, device and session identifiers, and technical information required for functionality and abuse prevention. LoopTag attempts to restrict phone numbers, email addresses, URLs, and certain abusive or prohibited content from being transmitted through conversations. These protections are intended to reduce misuse but may not prevent all attempts to share contact information.

Technical Information. We collect limited technical information necessary to operate and secure the Service, including browser type, device type, operating system, session identifiers, error logs, authentication information, and rate-limiting and abuse-prevention signals. LoopTag does not currently use IP geolocation. IP addresses may be processed transiently for security and rate-limiting purposes.

2. Cookies and Tracking

LoopTag uses limited functional cookies strictly necessary for authentication, session handling, and operation of the Service. We do not currently use non-essential advertising, behavioral tracking cookies, third-party analytics SDKs, or session replay tools. To support compliance with applicable global standards regarding cookies and tracking, if we introduce non-essential tracking technologies in the future, we will obtain your explicit, opt-in consent before placing such cookies on your device, and you will have the right to withdraw that consent at any time.

3. How We Use Information and Legal Basis for Processing

We use information to operate and maintain the Service; facilitate communication relating to lost property; authenticate accounts and users; prevent abuse, spam, harassment, fraud, and misuse; enforce our Terms of Use; provide customer support; improve security and platform reliability; and comply with legal obligations.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, our lawful bases for processing your personal data include:

• Performance of a Contract: Processing necessary to provide the Service and fulfill our Terms of Use (e.g., account creation, facilitating messages).

• Legitimate Interests: Processing necessary for our legitimate business interests, such as preventing fraud, ensuring platform security, and improving the Service, provided these interests are not overridden by your fundamental rights.

• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

• Consent: Processing based on your explicit consent (e.g., for marketing communications). You may withdraw your consent at any time; however, withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

4. Messaging & Privacy Model

LoopTag is designed as a limited-purpose communication platform intended to help facilitate the return of lost property. Finders do not create public accounts or profiles. Conversations are intentionally limited in duration and may automatically close after periods of inactivity, though related records may remain stored. LoopTag is not a social media platform, messaging network, marketplace, payment processor, identity verification service, emergency service, or tracking service.

Authorized administrators may access message content, uploaded images, and related records for abuse prevention, safety investigations, customer support, security purposes, legal compliance, and enforcement of our policies. Uploaded images and conversation records may remain stored after conversations close unless manually removed or deleted.

5. What We Do Not Do

LoopTag does not provide live GPS tracking, continuously monitor user location, create public user profiles, facilitate payments or rewards between users, guarantee item recovery, verify ownership, authenticity, provenance, or condition of physical items, verify the identity of users, or sell personal information. Tags may be removed, copied, transferred, reproduced, or attached to different items without our knowledge. Users are responsible for exercising reasonable judgment when communicating about, verifying, or recovering items.

6. Sharing of Information

We may share information with service providers and infrastructure providers, including hosting providers, authentication providers, email delivery providers, and security and fraud-prevention vendors, as well as with law enforcement or regulatory authorities where legally required. Current providers may include Supabase, AWS infrastructure providers, Vercel, Resend, and Twilio. We may also disclose information to protect the safety or rights of users, to investigate fraud or abuse, in connection with legal claims or investigations, or in connection with a merger, acquisition, restructuring, or sale of assets.

7. Data Retention

We retain information for as long as reasonably necessary to operate the Service, maintain platform integrity and security, comply with legal obligations, resolve disputes, and enforce agreements. LoopTag retains inactive account data and related conversation records in accordance with its internal data retention schedule, which generally provides for the deletion or anonymization of data after prolonged periods of inactivity, unless otherwise required by law.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no system or method of transmission over the Internet can be guaranteed to be completely secure. LoopTag currently relies on infrastructure-level encryption provided by our hosting and database providers. LoopTag does not currently provide end-to-end encrypted messaging.

9. International Data Transfers

LoopTag is operated from the United States. By using the Service from outside the United States, you understand that your information will be transferred to and processed in the United States and other countries where our service providers operate. For users in the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place for such transfers, which may include reliance on adequacy decisions, Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally valid transfer mechanisms.

10. Privacy Rights

Depending on your jurisdiction, you may have specific rights regarding your personal data. We will respond to privacy-related requests within the timeframes required by applicable law. To submit privacy-related requests, contact: privacy@looptag.co.

EEA, UK, and Switzerland Rights: You have the right to access your data, request rectification of inaccurate data, request erasure of your data (the "right to be forgotten"), restrict processing, object to processing based on legitimate interests, and request data portability. You also have the right to lodge a complaint with your local data protection supervisory authority.

United States Privacy Rights: To the extent required by the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Texas Data Privacy and Security Act (TDPSA), Florida Digital Bill of Rights (FDBR), and other applicable U.S. state privacy laws, residents of those states may have the following rights:

• Right to Know/Access: You have the right to request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share the information.

• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

• Right to Correct: You have the right to request that we correct inaccurate personal information.

• Right to Opt-Out of Sale/Targeted Advertising: LoopTag does not sell personal information or share personal information for cross-context behavioral advertising or targeted advertising.

• Right to Limit Use of Sensitive Personal Information: We do not use your sensitive personal information for purposes other than those reasonably necessary to perform the services requested.

• Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.

• Right to Appeal: In certain states (e.g., Virginia, Colorado, Connecticut, Texas), if we decline to take action on your privacy request, you have the right to appeal our decision by contacting us at privacy@looptag.co.

To exercise these rights, or to submit a request via an authorized agent, please email privacy@looptag.co. We will verify your identity before processing your request.

11. Children's Privacy

LoopTag is not intended for children under 13 years of age (or under 16 in certain European jurisdictions). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child without required parental consent, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we will notify users through the Service or by other appropriate means at least 30 days before the changes take effect. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

13. Contact

LoopTag LLC | Support: help@looptag.co | Privacy: privacy@looptag.co | Legal: legal@looptag.co