Privacy policy
Last updated 17 September 2026.
Draft, not reviewed. A structured draft for review, not a reviewed policy. Before publishing, confirm the controller/processor split with designers, the lawful bases, and the sub-processor list — UK GDPR gets this wrong expensively.
What we collect
- Your account: email address, display name and avatar if you set one.
- What you bought or subscribed to: orders, memberships and receipts.
- Downloads: every pattern download is logged against your account with a watermark identifier, a timestamp, a hashed IP address and a browser string.
- Reading progress: the round you are on, if you use the reader.
- Shop data, if you run one: your shop details and your Stripe account identifier. We never see your bank details; Stripe holds those.
We do not collect card numbers. Payments go to Stripe, who handle them directly.
Why we hold it
To run your account and deliver what you bought; to work out whether you are entitled to read or download a pattern; to detect and investigate pattern piracy; to meet tax and accounting obligations; and to email you about your orders. We only send marketing email if you ask for it, and you can stop it at any time.
Download logs deserve a specific mention. Watermarking every file to a buyer is how designers trace leaks. It means a copy of a pattern can be linked back to your account. We use this only to investigate a credible report of piracy.
Who else sees it
- The designer you bought from — your name, email and order.
- Stripe — payments, and the customer portal for memberships.
- Supabase — our database, authentication and file storage.
- Resend — transactional email.
- Vercel — hosting.
We do not sell your data, and we do not share it for anyone else’s advertising.
Designers and shoppers
When you buy from a shop, both we and the designer hold your details, for our own purposes. The designer is responsible for what they do with their customer list. Designers agree to handle it lawfully under the seller agreement.
How long we keep it
Account and order records for as long as the account exists, and afterwards only as long as tax law requires. Download logs for two years. Reading progress until you delete it.
Your rights
You can ask for a copy of your data, correct it, delete your account, or object to how we use it. Export and deletion are in your account settings; anything else, email hello@loopstore.shop. You can complain to the Information Commissioner’s Office if you think we have got it wrong.
Cookies
We set a cookie to keep you signed in across loopstore.shop and the shops on it. That is necessary for the site to work. We do not use advertising cookies.