Privacy Policy

LoopGallery ("we", "us") operates the website and mobile app at http://localhost:3000 (the "Service"). This policy explains what information we collect, how we use it, and your choices.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account information: email, display name, and profile details from Google Sign-In (via Firebase Authentication).
• Gallery content: usernames, bios, avatar choices, and media you upload (images and related metadata).
• Usage data: basic server logs (IP address, user agent, request paths) needed to operate and secure the Service.
• Device data (mobile app): standard WebView and app diagnostics required by Android; we do not sell this data.

We use your information to:

• Provide and maintain your gallery and account.
• Authenticate you and enforce quotas (storage, uploads, item limits).
• Host and deliver your uploaded media.
• Improve reliability, security, and abuse prevention.
• Comply with legal obligations when required.

Account and gallery metadata are stored in Cloudflare D1 (database). Media files are stored in Cloudflare R2 (object storage). Authentication is handled by Google Firebase.

Data may be processed in regions where these providers operate. We choose infrastructure with reasonable security practices.

We do not sell your personal information. We share data only with service providers that help run the Service (e.g. Cloudflare, Google/Firebase), when you choose to make a gallery public, or when required by law.

Public galleries are visible to anyone with the link or subdomain URL you configure.

We retain your data while your account is active. You may delete individual gallery items from the dashboard. To request full account deletion, email us at the address below; we will remove your profile and associated media within a reasonable period.

We use HTTPS, authenticated API routes, and access controls on storage. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Depending on your location, you may have rights to access, correct, or delete personal data. Contact us to exercise these rights. California residents may have additional rights under the CCPA; we do not sell personal information.

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after changes means you accept the updated policy.