DATA · POLICY

Privacy policy.

UPDATED · 16 MAY 2026

loot·ON respects your privacy. This policy explains what we collect, why, and your rights — in plain English, not legalese.

What we collect

  • Email address — only when you subscribe or set a price-drop alert. Double opt-in required.
  • Region preference — stored in a cookie (loot_region) so prices and stores match your country.
  • Anonymous analytics — Vercel Analytics records page views and basic device info. No IP stored long-term, no cross-site tracking.
  • Click logs — when you click an affiliate link we log product, region, timestamp. We don't log who clicked.

What we don't collect

  • Your real name, address, or phone number
  • Your payment info — purchases happen on the merchant site, not ours
  • Third-party advertising cookies (we don't run them)

Affiliate tracking

When you click "Claim drop" we redirect to a partner store (Eneba, Amazon, Fanatical, etc.). Those sites set their own cookies to credit us if you buy. You can see each store's privacy policy on their own site.

Your rights (GDPR / CCPA)

You can request a copy of your data, delete it, or unsubscribe at any time. Email hello@loot-on.com or use /privacy-request. Newsletter emails have an instant one-click unsubscribe.

Where data lives

Subscriber + alert data is stored in Supabase (Postgres). Emails are sent via Resend. Site hosted on Vercel. Rate limits via Upstash Redis in Mumbai.

Children

loot·ON is not directed at users under 16. We don't knowingly collect their data.