Privacy notice

Last updated: 22 October 2026. This notice covers the Loft website, contact form and optional waitlist, and the optional usage data of the Mac app, which is still being built.

Who is responsible

Andreas Osberghaus, Berliner Ring 68, 53175 Bonn, Germany, is responsible for this website’s processing of personal data. For questions or privacy requests, email hello@getloft.app.

Visiting this website

Cloudflare hosts and protects this website. Requests contain technical information such as your IP address, browser information, requested URL and time. We use this to deliver the site, diagnose failures and limit abuse. The legal basis is our legitimate interest in a secure, functioning website (Article 6(1)(f) GDPR).

The website does not use advertising cookies. Visit counts come from Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors. The beacon request reaches Cloudflare with the client IP address (which Cloudflare says it discards and does not store), the referrer and the page URL, and only provides aggregate visit statistics. We also keep aggregate daily waitlist signup counts by a coarse source, such as X, Reddit or a direct visit; those counts are not linked to email addresses. Our form code does not store your email or message in browser storage. Hosting providers may process technical data for their own security and service operations.

When you choose a language with the language switcher, we remember that choice only in your browser’s local storage. That stored choice stays on your device.

The optional waitlist

If you sign up, we use your email address to send a confirmation link. You join the mailing list only after confirming. The list is only for beta invitations, based on your consent (Article 6(1)(a) GDPR). You can withdraw consent using the unsubscribe link in any invitation or by emailing us. Withdrawal does not affect the lawfulness of earlier processing. Joining does not guarantee beta access.

If you sign up, we also store the language of the page you used with your waitlist entry and with your contact at Resend, so we can send confirmation and beta invitation emails in that language. We store nothing else about your language or location.

We store signup and confirmation times and the version of the consent wording to document the request and prevent abuse, based on our legitimate interest in operating the list responsibly (Article 6(1)(f) GDPR). The confirmation link expires after 24 hours. Expired, unconfirmed records are removed at the next hourly cleanup. We retain confirmation records while operating this beta invitation list so we can document permission to send invitations. When the list closes, we delete those records unless they are still needed for a legal obligation or claim. You can request erasure by email.

If you enter an email that is already confirmed, we send a short note instead of a new link. To limit repeat emails, we store when we last sent that note and how many we sent, for as long as we keep your confirmation record.

Resend stores confirmed contacts and delivers emails. We retain mailing-list contacts while operating this beta invitation list. After you unsubscribe, we retain the unsubscribe status to avoid sending further emails. Unsubscribing does not automatically erase contact or email delivery records; you can request erasure by email. Delivery records follow the provider’s retention settings, with longer retention only where needed for security, legal obligations or claims.

This mailing list is separate from your future Loft account. Its email data is readable by the services processing it; it does not have the intended app’s device-side file encryption.

Optional usage data in the Mac app

The Loft Mac app shares usage data to help us improve it. Sharing is on by default. You can turn it off at any time with “Share usage data” on the last setup step or in Settings. The legal basis is our legitimate interest in understanding whether setup and file operations work, so we can fix problems (Article 6(1)(f) GDPR). You can object at any time by turning sharing off. Turning it off stops new events; events already queued may still be sent.

When sharing is on, the app reports how far setup got (started, recovery phrase backed up, Loft folder connected, finished) and whether file uploads, changes, deletions and downloads succeeded, failed, were blocked or were cancelled. These events never include filenames, folder names, file contents, account IDs, recovery phrases or error details.

To count usage over time, the app creates a random identifier on your Mac. It is separate from your account, and the analytics software hashes it before sending. The service also receives standard app and device details, such as the app and macOS versions, language, region and Mac model, and technical request data such as your IP address. The data goes to TelemetryDeck GmbH in Germany, which processes it on our behalf and only gives us aggregate statistics. See TelemetryDeck’s privacy policy.

Contacting us

The contact form sends your email address and message to hello@getloft.app through Resend. Cloudflare Email Routing forwards incoming mail to our Apple iCloud Mail inbox. We use these details to respond, not to add you to the waitlist. Please do not send passwords, recovery phrases or confidential files.

The legal basis is Article 6(1)(b) GDPR for enquiries about a potential contract, or Article 6(1)(f) GDPR for our legitimate interest in answering other enquiries. We keep correspondence until the enquiry is resolved and no further follow-up is needed, subject to legal retention obligations or the need to establish, exercise or defend claims.

Providers and international processing

Our service providers include Cloudflare, Inc. for hosting, request processing and the signup database, and Plus Five Five, Inc. (Resend) for email delivery and contact management. The signup database is configured for the EU. That does not mean all provider processing stays within the EU: email and service operations can involve the United States and other countries.

The providers’ data-processing terms describe their subprocessors and transfer safeguards, including EU standard contractual clauses where applicable: Cloudflare’s data-processing terms and Resend’s data-processing terms. For the receiving mailbox, see Apple’s privacy policy. You can ask us for information about the safeguards relevant to your data.

Your choices and rights

Providing an email for the waitlist is voluntary; without it, we cannot send beta invitations. The contact form needs an email and message so we can respond. You can browse the website without using either form.

Subject to the applicable conditions, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. Contact hello@getloft.app to exercise these rights.

You may also complain to a data-protection authority, including the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. We do not use these forms for automated decisions with legal or similarly significant effects.