Privacy Policy

Last Updated: October 2, 2026

Introduction

TheLoops ("we", "us", or "our") operates the website theloops.live and the TheLoops application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Data Controller

The data controller responsible for your personal data is:

  • Name: Illia Khorunzhyi, Sole Proprietor
  • Address: 6B Manastyrskoho St., Apt. 7, Lviv, 79066, Ukraine
  • Tax ID: 3602301533
  • Email: support@theloops.live

Definitions

  • Account: A unique account created for you to access our Service or parts of our Service.
  • Company: Means Illia Khorunzhyi, Sole Proprietor, doing business as TheLoops, located in Lviv, Ukraine.
  • Device: Any device that can access the Service such as a computer, mobile phone, or digital tablet.
  • Personal Data: Any information that relates to an identified or identifiable individual.
  • Service: Refers to the TheLoops website and application.
  • Usage Data: Data collected automatically, generated by the use of the Service or from the Service infrastructure itself.

Information We Collect

Personal Data

When you register for an account or use our Service, we may ask you to provide certain personally identifiable information, including but not limited to:

  • Email address
  • First and last name
  • Usage data and preferences

Payment Information: Payments are processed through Monobank (Plata by mono) for card payments, through Cryptomus for cryptocurrency, or by direct bank transfer to our Ukrainian sole proprietor (FOP) account. We do not store your card details — they are entered on the payment provider's own page and never reach our servers. Each provider processes your payment data in accordance with their own privacy policy.

Video Content Data

When you use our Service to create and stream video content, we may collect:

  • Video files you upload for streaming
  • Stream configuration settings (resolution, bitrate, etc.)
  • Streaming schedule and duration data
  • YouTube channel information connected to your account
  • Technical metadata embedded in the video files you upload (for example the app or device model that created the file, its creation time, and its duration and frame size). Location data embedded in video files is not kept
  • Short one-way fingerprints of what your videos look and sound like — hashes of reduced, 9×8-pixel greyscale keyframes from the first five minutes and an acoustic fingerprint of the first two minutes — used to recognise the same content uploaded to several accounts to claim the free trial again. They cannot be turned back into the video

Stream Keys and Platform Credentials

To enable streaming functionality, we collect and store:

  • YouTube stream keys provided by you
  • OAuth tokens for connected YouTube accounts
  • Platform-specific streaming credentials

Important: Stream keys are stored using encryption. However, by their nature, they must be decryptable to function. We implement strict access controls and security measures to protect these credentials.

Usage Data

We automatically collect certain information when you access and use the Service, including:

  • Your device's Internet Protocol (IP) address
  • Browser type and version
  • The pages of our Service that you visit
  • The time and date of your visit
  • The time spent on those pages
  • Unique device identifiers and other diagnostic data
  • Technical characteristics of your device and browser that any website can read without asking — such as device model and operating system version, screen size, graphics processor, time zone and language settings, number of processor cores and memory, and short one-way hashes of how your browser draws a test image, renders a test sound and which common fonts it has — the graphics adapter as WebGPU reports it, a short hash of the text-to-speech voices installed, the number of cameras, microphones and speakers (never their names), the screen's colour range and the calendar and clock format — and, as reported by our network provider (Cloudflare) for your network address, its country, region, city, postal code and time zone and the network (autonomous system) it belongs to. Not your device's own location
  • How you first arrived at our website: the address of the page that linked to us (without the part after "?"), the campaign tags in the link (utm_*), the first page you opened, and whether the link carried an advertising click identifier (never its value)
  • When you start an upload or a broadcast: the network address and the device characteristics above that it came from

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide you with the Service you have requested.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Service, preventing fraud, and making sure the free trial is used once per person and per channel rather than claimed repeatedly through multiple accounts.
  • Consent: Where you have given us specific consent to process your data for a particular purpose.
  • Legal Obligation: Processing necessary to comply with a legal obligation to which we are subject.

How We Use Your Information

We use the collected data for various purposes:

  • To provide and maintain our Service
  • To manage your account and provide customer support
  • To process your transactions and subscriptions
  • To send you updates, security alerts, and support messages
  • To monitor and analyze usage patterns and trends
  • To detect, prevent, and address technical issues
  • To improve our Service and develop new features
  • To comply with legal obligations
  • To check whether the free trial is still available for your channel and email address, and to recognise a free trial being claimed again through other accounts from the same device or network, or with the same video content

Video Content Processing

Your video content is processed for the following purposes:

  • Transcoding and preparing videos for streaming
  • Delivering video streams to configured platforms (YouTube)
  • Storing videos for scheduled and repeated streaming
  • Generating thumbnails and preview images
  • Monitoring stream health and quality
  • Providing analytics on stream performance

Apart from reading the technical metadata and taking the fingerprints described above to prevent abuse of the free trial, we do not use your video content for any purpose other than providing the Service. We do not analyze, sell, or share your video content with third parties.

Stream Key Usage

Your stream keys and platform credentials are used exclusively to:

  • Authenticate and initiate streams on your behalf to connected platforms
  • Manage stream settings and configurations
  • Recognising a channel that has already used its free trial, through a one-way fingerprint of the key rather than the key itself (see Data Retention)

We never share your stream keys with third parties. Access to stream keys is restricted to automated systems necessary for stream delivery.

Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service. Cookies are used for:

  • Essential cookies for Service functionality and security
  • Authentication and session management
  • Remembering your preferences and settings
  • Analytics to understand how our Service is used
  • A random browser identifier that helps prevent abuse of the free trial, also kept in the browser's local storage and restored from there if only the cookie is deleted (see Data Retention)
  • A record of your device's technical characteristics (the tl_dt cookie) that helps prevent abuse of the free trial (see Data Retention)
  • A record of how you first arrived at our website (the tl_ft cookie) that helps prevent abuse of the free trial (see Data Retention)

You can control cookies through your browser settings. For more details, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your information in the following situations:

  • Service Providers: We share data with the following third-party providers who assist us in operating the Service: Monobank / JSC Universal Bank (card payment processing), Cryptomus (cryptocurrency payment processing), Google LLC (Google Analytics, Google Ads), Hetzner Online GmbH (cloud hosting and storage, Germany), Cloudflare, Inc. (content delivery, DDoS protection, and web application firewall), and Resend (transactional email delivery). Each provider processes data strictly for the purposes described in this policy.
  • Payment Processing: Card payments are processed by Monobank (JSC Universal Bank, Ukraine) and cryptocurrency payments by Cryptomus. Your payment data is governed by the privacy policy of whichever provider you choose to pay through.
  • Analytics: We use Google Analytics to understand how the Service is used. Google may collect and process data about your usage.
  • YouTube/Google: When you connect your YouTube account, certain data is shared with Google as necessary for streaming functionality. YouTube's Terms of Service and Google's Privacy Policy apply.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred.
  • Legal Requirements: We may disclose your data if required to do so by law or in response to valid legal requests.
  • With Your Consent: We may share your data for any other purpose with your explicit consent.

We do not sell your personal data to third parties.

Google Account Access

You can sign in to TheLoops with your Google Account. When you do, Google shares your email address, name and profile picture with us so that we can create and identify your account. We never receive your Google password.

Where TheLoops connects to Google or YouTube services on your behalf, we request only the narrowest access the feature needs, and the permissions being requested are shown to you before you grant them.

Withdrawing access

You can review and withdraw the access you have granted TheLoops at any time on Google's security settings page: https://security.google.com/settings/security/permissions

Once you withdraw access, we stop requesting data from Google. Data obtained through YouTube API Services is deleted within 7 days of the withdrawal, and anything we continue to hold is limited to what is needed to keep your TheLoops account working.

Data obtained through YouTube API Services is refreshed or deleted within 30 calendar days.

Google and YouTube terms

Google's own handling of your data, and the use of YouTube features, are governed by their own documents:

Data Security

The security of your personal data is important to us. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Periodic review of our security practices and configurations
  • Access controls and authentication mechanisms
  • Monitoring and logging of system access

Infrastructure Security

Our Service runs on cloud infrastructure with enterprise-grade security. Primary hosting is provided by Hetzner Online GmbH (Germany), a European cloud infrastructure provider, with data stored on servers located within the European Union. Incoming traffic is routed through Cloudflare, Inc., which provides content delivery, DDoS protection, and a web application firewall through geographically distributed edge nodes.

Stream keys are encrypted using industry-standard encryption algorithms. Access to decrypted keys is limited to automated streaming systems and is logged for audit purposes.

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to:

  • Fulfill our contractual obligations (providing the Service)
  • Comply with legal obligations (e.g., tax and accounting requirements)
  • Resolve disputes and enforce our agreements
  • Maintain security and prevent fraud

Video Content Retention

Video files you upload are kept while your account has an active paid subscription or a Balance above zero, for as long as you choose to keep them. When it has neither, its video files are deleted automatically: 90 days after the last paid subscription ended or the Balance ran out, or — for an account that has never paid — 30 days after the end of its free trial. Buying a subscription or adding funds before that date keeps every file, and the date is shown in your dashboard. This rule applies from November 1, 2026; for files stored before then, the period is counted from that date at the earliest. When files are deleted this way we keep a record of each video — its name, size, length and upload date — for our own records; it is no longer shown in your account, and it is deleted together with your account. Upon account deletion or your request, video content and these records are permanently deleted within 30 days. Deleted files cannot be recovered.

Stream Key Retention

Stream keys and platform credentials are retained for as long as your account is active and the platform connection is maintained. They are deleted within 24 hours after you disconnect a platform or delete your account.

Free Trial Eligibility Records

The free trial is one per person and per channel. To apply that, when a broadcast goes on air we keep one-way keyed fingerprints (HMAC) of the stream keys it used, of your email address in a normalised form (for Gmail, without dots or a "+" label), of the network addresses you signed in from, of a random identifier our site stores in your browser (the tl_did cookie), of your device's technical characteristics (see Usage Data), of the size and length of the video files that went on air, and of their duration and frame size, together with your account number and the dates. We also keep, with each video and for as long as the video is kept, the picture and sound fingerprints described under Video Content Data. A fingerprint cannot be turned back into what it was made from. Fingerprints of network addresses, networks, browsers, devices and video files, and how you first arrived at our website, are used to measure abuse and do not refuse a trial on their own. If a start is refused because its stream key or email address already had a free trial on another account, the free trial of the account that tried is ended as well. These records are kept for 90 days after the last broadcast they relate to — including after your account is deleted, so that deleting an account cannot be used to claim the trial again — and are then deleted automatically. The sign-in and activity records they are drawn from (network address and its network and approximate location, browser identifier, device characteristics, how you first arrived, and when uploads and broadcasts were started) are kept for up to 12 months. Refusals are made automatically. If you believe one was wrong, contact us and a person will review it; where it was wrong, we restore your free trial.

Usage data is typically retained for a shorter period, unless it is needed to strengthen security or improve the functionality of the Service.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay via the contact email associated with your account.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right of Access: You have the right to request copies of your personal data.
  • Right of Rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right of Erasure: You have the right to request deletion of your personal data under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
  • Right to Data Portability: You have the right to request transfer of your data to another organization or directly to you.
  • Right to Object: You have the right to object to the processing of your personal data.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority.

To exercise any of these rights, please contact us at support@theloops.live and we will respond within 30 days.

Account and Data Deletion

To request deletion of your account and all associated data, please contact us at support@theloops.live with the subject line "Account Deletion Request". Upon receiving your request:

  • Your account will be deactivated promptly
  • All personal data will be deleted within 30 days
  • Video content and stream keys will be permanently removed

You will receive a confirmation email once the deletion process is complete.

Restricting Processing

To request restriction of processing of your personal data, please contact us at support@theloops.live specifying which processing activities you wish to restrict.

Data Portability

To request a copy of your data in a portable format, please contact us at support@theloops.live and we will provide your data in a commonly used, machine-readable format within 30 days.

International Data Transfers

Your data is processed on servers located within the European Union. If you access the Service from outside the EU, your data will be transferred to and processed in the EU, where it is protected in accordance with this Privacy Policy and applicable EU data protection laws.

If you have questions about international data transfers, please contact us at support@theloops.live.

Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us: