Privacy

What we hold, and why.

Last updated 08/25/2026

Loontrace is a personal project. It is not a company, not a product, and not a consumer service. There is no public sign-up, no advertising, no tracking, and nothing is ever sold or shared for marketing.

This website

This page and the front page at loontrace.com collect nothing. There are no analytics scripts, no advertising pixels, and no cookies set by us. Web fonts are loaded from Google Fonts, which receives the request in order to serve them.

Our hosting provider, Cloudflare, processes requests to this site and keeps standard operational logs, including IP addresses, for security and abuse prevention.

The applications

The tools built here are personal ones, closed by default and reachable only by invitation. What they hold is ordinary and unremarkable.

Signing in

Access to an application is controlled by Cloudflare Access. When someone signs in, the application receives their email address and a token confirming their identity provider accepted them. That is used to decide what the person may see and to attribute records they create or change.

Passwords are never received or stored here. Authentication happens entirely with the identity provider.

Where information is stored

• Application records are stored in Cloudflare D1 databases.
• Uploaded files are stored in Cloudflare R2.
• Where an application is connected to a Google Sheet, records are also synchronised with that spreadsheet in the account that authorised the connection.

Data is processed on Cloudflare's global network. Where a Google connection is in use, Google processes that data under its own terms.

Public forms

Some applications include forms open to the public. Submissions are protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile receives limited technical signals about the browser and connection to make that assessment. Submissions are limited to the specific fields the form declares; anything else sent is discarded before it is stored.

How long we keep it

Application records are kept for as long as they are useful, and are removed on request. Operational logs held by the infrastructure providers above follow their own retention schedules.

Sharing

Nothing is sold, and nothing is shared for advertising. Information reaches only the infrastructure providers named above, so far as is necessary to run the thing, and anywhere the law requires it.

Your choices

To ask what is held about you, to have it corrected, or to have it removed, write to contact@loontrace.com.

Changes

If this page changes in a way that matters, the date at the top changes and anyone using an affected application is told directly.

---