Effective from 31 August 2026
This Privacy Policy explains how Looties ("Looties", "we", "us") collects, uses, and shares personal data in connection with the Looties platform, including the looties.io website and the "Looties — Tech Swag Search" browser extension (the "Extension"). Looties acts as the data controller within the meaning of the GDPR.
For privacy questions or to exercise your rights, contact privacy@looties.io.
We collect only the data necessary to provide the Service.
Looties does not access or store your full credit card or bank account details. Payment processing is handled entirely by Stripe. Payment information is transmitted directly to Stripe through secure mechanisms. Looties receives only limited payment-related information necessary to manage transactions. For more information, please refer to the Stripe Privacy Policy.
We use personal data to: operate and provide the Service; process transactions and member communications; assess and respond to job applications for current and future recruitment; investigate abuse, enforce our rules and protect members; secure and improve platform reliability; comply with legal and regulatory obligations; and send marketing communications only where you have chosen to receive them.
You can turn marketing communications off at any time in your account settings, and every message carries an unsubscribe link.
We do not sell personal data.
Personal data is shared only with trusted third-party service providers acting as data processors and only to the extent necessary to operate, secure, and improve the Service. These include providers for payments, shipping and logistics, hosting and infrastructure, email delivery, analytics, error monitoring, and AI services.
Where you choose to use AI Services, related data may be processed by artificial intelligence systems acting as data processors. The terms governing such processing are described in Appendix 2 – AI Usage Policy, which forms an integral part of the Terms of Service and should be read together with this Privacy Policy.
Looties is operated from France and primarily stores personal data within the European Union.
Certain third-party service providers used to provide the Service may process limited amounts of data outside the European Economic Area (EEA), including in the United States. Such processing is limited to what is necessary to deliver specific functionalities and does not necessarily involve long-term storage outside the European Union.
Where international transfers occur, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms, to ensure an adequate level of protection for personal data.
We retain your data only for as long as strictly necessary for the purposes set out in this Policy:
You may request the deletion of your account at any time from your account settings, or by following the steps set out on our Data Deletion page.
A deletion request is first assessed against any transaction still open on the account, including an order in progress, a payout due to you, a pending refund, and an open dispute. Where such a transaction exists, you are informed of its nature and the request is held until it is settled. No data is erased at the time the request is submitted.
Once no transaction remains open, the account is anonymised. The identifying data associated with it, including your name, email address, profile photograph and profile content, is removed. The account can no longer be accessed using your existing credentials and cannot be restored, and any subsequent use of the Service requires the creation of a new account. Other users see a former member in place of your identity, with no visible identifier.
The following are retained notwithstanding the anonymisation:
A restricted internal reference is retained, allowing the records listed in 6.4 to be attributed to a single former account. That reference is not accessible to users of the Service and is processed solely for the establishment, exercise or defence of legal claims.
We apply a minimalist cookie policy and prioritize your privacy.
The "Looties — Tech Swag Search" Chrome browser extension (the "Extension") is published by Looties on the Chrome Web Store. The Extension is a toolbar popup that lets users search the public Looties marketplace by keyword and open matching listings on looties.io.
The Extension does not collect, store, or transmit personal data. Specifically, the Extension:
chrome.storage, cookies, IndexedDB, or any local storage mechanism;The only outbound network request made by the Extension is the search query you type in the popup, sent to the public Looties REST API. This request is technically equivalent to typing the same query into the search bar on looties.io. Standard server access logs (request timestamp, anonymised IP address, query string) may be processed by our hosting provider as described in Section 4 (Sub-Processors). These logs are not linked to a user identity by the Extension.
The Extension requests a single, narrowly-scoped host permission for the public Looties REST API host. No other permissions are requested. The Extension does not request access to your tabs, browsing history, location, or any web page content.
Uninstalling the Extension from chrome://extensions removes it entirely. Because the Extension stores nothing locally, no data persists on your device after uninstall.