Skip to content

    Privacy Policy

    Last updated: September 25, 2026

    1. Introduction

    Infinity Looper ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our curated looping video background platform ("Service").

    By accessing or using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

    2. Information We Collect

    2.1 Information You Provide

    • Account Information: Email address and password when you create an account
    • Payment Information: Stripe processes your payment details. We never see, store, or log full card numbers, CVVs, or bank details
    • Google Sign-In: If you choose to sign in with Google, we receive your name, email address, and profile picture from Google
    • Support Communications: Name, issue type, and description when you submit support requests
    • Feedback and Surveys: Responses you provide through onboarding surveys, download feedback, and feature request forms
    • Newsletter Subscription: Email address if you subscribe to our mailing list

    2.2 Automatically Collected Information

    • Device Information: Browser type, operating system, screen resolution, and device identifiers
    • Usage Data: Pages visited, features used, time spent, click patterns, and navigation flow
    • Log Data: IP address, access times, referring URLs, and error logs
    • Session Identifiers: Anonymized session IDs for analytics and fraud prevention

    2.3 Analytics Data

    We keep our own first-party analytics in our database to understand how people use the Service. This covers page views, section visibility, feature use, and purchase events. It is tied to a random session ID. When you are signed in, it can also be linked to your account.

    We also record how you arrived: the referring website's domain (never the full address), and campaign or ad click IDs in the link you followed (for example utm tags, a Google click ID, or a Reddit click ID). We keep these with your order for our own reporting and do not send them to any ad network (Section 7.3).

    2.4 Information We Do Not Collect

    Infinity Looper is a curated library, so we do not accept uploaded video content. We do not collect biometric data or precise location.

    3. Legal Basis for Processing (GDPR)

    If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

    • Contract Performance: Processing necessary to deliver the Service, manage your account, and fulfill subscriptions (Art. 6(1)(b) GDPR)
    • Legitimate Interest: Analytics, fraud prevention, and Service improvement where our interests do not override your rights (Art. 6(1)(f) GDPR)
    • Consent: Google Analytics cookies, the newsletter, and optional feedback surveys. You may withdraw consent at any time (Art. 6(1)(a) GDPR)
    • Legal Obligation: Retaining transaction records as required by tax and financial regulations (Art. 6(1)(c) GDPR)

    4. How We Use Your Information

    We use your information for the following purposes:

    • Service Delivery: Provide access to the gallery, process downloads, fulfill custom and kit orders, and manage memberships
    • Authentication: Verify your identity, manage login sessions, and enforce account security
    • Payment Processing: Process payments for library loops, stream kits, memberships, custom loops, and loop packs; deliver digital downloads and keep purchase history
    • Customer Support: Respond to your inquiries and support tickets
    • Service Improvement: Study usage patterns to improve features, choose content, and speed up the site
    • Communications: Send transactional emails (purchase confirmations, membership renewals, kit/custom delivery, pack download instructions, and subscription updates) and, with your consent, newsletter updates
    • Security and Fraud Prevention: Detect and prevent unauthorized access, abuse, and fraudulent activity
    • Legal Compliance: Comply with applicable laws, respond to lawful requests, and enforce our Terms of Service

    5. Data Sharing and Disclosure

    We do not sell, rent, or trade your personal information. We share data only with:

    5.1 Service Providers

    These companies process data for us. The first six are needed to run the Service:

    • Supabase: accounts, sign-in, our database, file storage, and server functions. Privacy policy
    • Stripe: payments and checkout. Card details go to Stripe, never to us. Privacy policy
    • Resend: sends order, account, and newsletter emails. Privacy policy
    • Bunny.net: delivers video previews and images, so it sees your IP address. Privacy policy
    • Vercel: hosts the website, so it sees your IP address and request logs. Privacy policy
    • Google Sign-In: only if you choose to sign in with Google. Privacy policy

    These two are used only if you accept the cookie banner:

    Each provider handles data under its own terms and privacy policy, and only for the service it provides to us.

    5.2 Legal Requirements

    We may disclose your information if required to:

    • Comply with applicable law, regulation, or valid legal process
    • Respond to lawful requests from public authorities, including law enforcement
    • Protect our rights, privacy, safety, or property, or that of our users
    • Enforce our Terms of Service

    5.3 Business Transfers

    In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your data is transferred and becomes subject to a different privacy policy.

    5.4 YouTube API Services

    Infinity Looper uses YouTube API Services to publish our looping backgrounds as short videos to our own official YouTube channel, so shoppers can preview them. By using our Service you also agree to be bound by the YouTube Terms of Service, and our use of information received from YouTube API Services adheres to the Google Privacy Policy.

    • What we access: we upload videos to, and read basic status information about, our own YouTube channel only. We do not access, collect, store, or share any other YouTube user's personal data.
    • What we store: only the video IDs of content we ourselves have uploaded, so we don't publish duplicates. No YouTube user data is retained.
    • Revoking access: the channel owner can revoke Infinity Looper's access to YouTube API Services at any time via the Google security settings page.

    6. Data Security

    We implement industry-standard security measures to protect your data:

    • Encryption in Transit: Data between your browser and our servers travels over HTTPS (TLS)
    • Encryption at Rest: Our database provider encrypts stored data
    • Access Controls: Only the people who run the Service can reach your data, and only for support and operations
    • Password Security: Passwords are hashed and never stored in plain text
    • Row-Level Security: Database-level security policies ensure users can only access their own data
    • Input Validation: Server-side constraints on all user inputs to prevent injection and abuse

    While we employ commercially reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

    7. Cookies and Tracking Technologies

    7.1 Essential Cookies

    We use strictly necessary cookies for authentication and session management. These cookies are required for the Service to function and cannot be disabled.

    7.2 Google Analytics (with your consent)

    We use Google Analytics (measurement ID G-PX320GNC85) to understand how visitors use the Service. Its script loads on every page. Until you choose Accept, it sets no cookies and sends Google only basic cookieless signals, such as that a page loaded. After you accept, it stores analytics cookies. Google signals and ad personalization are switched off.

    7.3 Ad tracking is off

    We do not run ad conversion tracking. The site sends no purchase data, ad click IDs or hashed emails to Google Ads, Reddit or any other ad network, whatever you choose in the banner. If we ever turn ad measurement on, we will update this policy first and ask for your consent before anything is sent.

    We do not show ads on this site, we do not sell your personal information, and we do not share it with data brokers.

    7.4 Changing your choice

    Your choice is saved in your browser. You can change it here at any time. Current choice: not chosen yet (off until you choose).

    If your browser sends a Global Privacy Control signal, we treat it as Reject and do not show the banner. You can still choose Allow below.

    8. Data Retention

    We retain your data for the following periods:

    • Account Information: As long as your account is active, plus 30 days after a deletion request is processed
    • Purchase and Transaction History: 7 years from the date of transaction, as required for tax and legal compliance
    • Download History: As long as your account is active
    • Support Tickets: 2 years from resolution
    • Newsletter Subscriptions: Until you unsubscribe
    • Analytics Data: Session-level data is retained for up to 12 months; aggregated and anonymized data may be retained indefinitely
    • Feedback and Surveys: 3 years from submission, or until account deletion

    When data is no longer needed, it is securely deleted or irreversibly anonymized.

    9. Your Privacy Rights

    Depending on your location, you may have the following rights regarding your personal data:

    9.1 Access and Portability

    You can access your account information at any time through your dashboard. You may request a copy of your personal data in a commonly used, machine-readable format.

    9.2 Correction

    You can update your account information through your account settings or by contacting support.

    9.3 Deletion

    You may request deletion of your account and associated personal data through your account settings. Some information may be retained as required by law (e.g., transaction records for tax compliance). We will process deletion requests within 30 days.

    9.4 Opt-Out of Communications

    You can unsubscribe from our newsletter at any time using the unsubscribe link in any email. Transactional emails (purchase confirmations, security alerts) cannot be opted out of while your account is active.

    9.5 Rights for EEA and UK Residents (GDPR)

    If you are in the European Economic Area or United Kingdom, you have additional rights including:

    • Right to object to processing based on legitimate interest
    • Right to restrict processing
    • Right to withdraw consent at any time (without affecting prior lawful processing)
    • Right to lodge a complaint with your local data protection authority

    9.6 Rights for California Residents (CCPA/CPRA)

    California residents have the right to:

    • Know what personal information is collected, used, and shared
    • Request deletion of personal information
    • Opt out of the sale or sharing of personal information. We do not sell personal information. Ad tracking is off (Section 7.3), and you can turn analytics cookies off in Section 7.4
    • Correct inaccurate personal information
    • Limit the use of sensitive personal information
    • Non-discrimination for exercising privacy rights

    9.7 How to Exercise Your Rights

    To exercise any of the above rights, contact us through the Support page. We will respond to verifiable requests within 30 days (or 45 days for complex requests, with notice).

    10. Children's Privacy

    Our Service is not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete such information within 30 days.

    11. International Data Transfers

    Your information may be transferred to and processed in countries other than your country of residence. If you are located in the EEA, UK, or Switzerland, we ensure that any transfer of personal data to other countries relies on the safeguards our providers offer, such as Standard Contractual Clauses (SCCs) or an adequacy decision.

    12. Third-Party Links

    Our Service may contain links to third-party websites or services (e.g., Stripe for payments). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and where required by law, sending you an email notification.

    Your continued use of the Service after any modifications indicates your acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using the Service and may request deletion of your data.

    14. Contact Us

    For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the Support page or email hvass97@gmail.com. Infinity Looper is run from Australia. If you are in Australia and not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC).

    For more information about our service terms, please see our Terms of Service.