LoopCraft ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
We collect information you provide directly: account registration data (name, email), profile information (display name, bio, country, social links), transaction data (purchases, payment method details handled by Stripe/PayPal), content submissions (presets), reviews, and favorites. We also collect your date of birth to verify your age and protect minors, and — for users under 18 — a parent or guardian's email address to obtain consent. We automatically log page views and basic usage analytics associated with your account to operate and improve the service. Children's data: if you are under 18, we process your data only after a parent or guardian has verified their consent, and a guardian may contact us at any time to review, correct, or withdraw it.
We use your information to: provide and maintain our services, process payments and deliver purchased content, communicate with you about your account and purchases, improve our platform, comply with legal obligations, and prevent fraud. Purchased preset files are additionally personalized with an encrypted order identifier (watermarking) to deter unauthorized redistribution; no personal data is embedded in the files themselves.
We use the following third-party services that may process your data: Stripe and PayPal for payment processing, Supabase for authentication and data storage, Vercel for hosting, Resend for transactional emails. Each service has its own privacy policy governing their use of your data.
We use only essential cookies, for authentication and language preferences. We do not use analytics, advertising, or third-party tracking cookies.
For users in the EU/EEA we process personal data on these GDPR Article 6 bases: to perform our contract with you — operating your account, processing purchases, and delivering downloads (Art. 6(1)(b)); our legitimate interests in running, securing, and improving the marketplace and preventing fraud (Art. 6(1)(f)); your consent, where asked, for optional marketing emails (Art. 6(1)(a)); and compliance with legal obligations such as tax record-keeping (Art. 6(1)(c)).
LoopCraft is operated from Hong Kong and handles personal data under the Personal Data (Privacy) Ordinance (Cap. 486) and its six Data Protection Principles. We collect personal data for the purposes described above, keep it only as long as necessary, and protect it with appropriate security. Under DPP6 you may request access to or correction of your personal data and ask about our privacy policies and practices — email contact@loopcraft.site and we will respond within 40 days as the Ordinance requires. We will not use your personal data for direct marketing without your consent, and every marketing message includes an opt-out.
Account data is retained while your account is active. After account deletion: profile data is anonymized immediately, purchase records are retained for 7 years (tax compliance), favorites and follows are deleted immediately. Page-view and usage logs are retained for up to 90 days. Accounts that remain inactive for an extended period may be anonymized automatically.
For privacy-related inquiries, contact us at:
contact@loopcraft.siteIn accordance with the Act on the Protection of Personal Information (APPI), we specify that your personal information is used for: providing loopstation educational content and preset marketplace services, processing payments and delivering digital products, facilitating communication with artists, and improving our services.
We share personal information with third parties only as described in this policy: payment processors (Stripe, PayPal) for transaction processing, cloud infrastructure providers (Supabase, Vercel) for service delivery. We do not sell your personal information to third parties.
To provide the service, we may transfer your personal data to third parties located outside Japan — cloud, payment, and email providers in the United States and other countries (Supabase, Vercel, Stripe, PayPal, Resend). These transfers are made as necessary to provide the service, based on your consent or performance of our contract; each provider handles personal data under its own privacy policy.
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), access controls, and regular security audits.
The Personal Information Protection Commission (PPC) of Japan oversees the enforcement of APPI. You may contact the PPC for complaints regarding the handling of your personal information.
Under APPI, you have the right to request: disclosure of your personal information, correction of inaccurate data, cessation of use or deletion of your personal information, and cessation of third-party sharing. Contact us at the email above to exercise these rights.
Last updated: July 2026
