Looties Privacy Policy

Effective from 11 May 2026

1. Scope

This Privacy Policy explains how Looties ("Looties", "we", "us") collects, uses, and shares personal data in connection with the Looties platform, including the looties.io website and the "Looties — Tech Swag Search" browser extension (the "Extension"). Looties acts as the data controller within the meaning of the GDPR.

2. Data We Collect

We collect only the data necessary to provide the Service.

2.1. Data You Provide

  • Identity:username and full name,
  • Contact:email address, postal address, and phone number,
  • Listing Content:photos and descriptions of items you sell,
  • Support Communications:messages sent to our support team.

2.2. Payments Data

Looties does not access or store your full credit card or bank account details. Payment processing is handled entirely by Stripe. Payment information is transmitted directly to Stripe through secure mechanisms. Looties receives only limited payment-related information necessary to manage transactions. For more information, please refer to the Stripe Privacy Policy.

2.3. Technical Data

  • Usage Data:anonymous information relating to use of the Service.
  • Device Info:IP address, browser type, and operating system.

3. How We Use Your Data

We use personal data to: operate and provide the Service, comply with legal and regulatory obligations, improve platform performance, and send marketing communications where you have provided consent.

4. Sub-processors

We do not sell personal data.

Personal data is shared only with trusted third-party service providers acting as data processors and only to the extent necessary to operate, secure, and improve the Service. These include providers for payments, shipping and logistics, hosting and infrastructure, email delivery, analytics, and AI services.

Where you choose to use AI Services, related data may be processed by artificial intelligence systems acting as data processors. The terms governing such processing are described in Appendix 2 – AI Usage Policy, which forms an integral part of the Terms of Service and should be read together with this Privacy Policy.

5. International Data Transfers

Looties is operated from France and primarily stores personal data within the European Union.

Certain third-party service providers used to provide the Service may process limited amounts of data outside the European Economic Area (EEA), including in the United States. Such processing is limited to what is necessary to deliver specific functionalities and does not necessarily involve long-term storage outside the European Union.

Where international transfers occur, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms, to ensure an adequate level of protection for personal data.

6. Data Retention

We retain your data only for as long as strictly necessary for the purposes set out in this Policy:

  • Active Accounts: We retain your data for the entire duration of your use of the Service.
  • Inactive Accounts: If your account remains inactive (no login) for a period of 3 years, your personal data will be deleted or anonymized, in accordance with CNIL recommendations.
  • Legal Obligations: Specific data, such as transaction records and invoices, are retained for a period of 10 years to comply with French accounting and tax obligations (Article L. 123-22 of the Commercial Code).

You can request the deletion of your account and associated personal data at any time by following the steps on our Data Deletion page.

7. Cookies

We apply a minimalist cookie policy and prioritize your privacy.

Strictly Necessary Cookies: We use technical cookies that are essential for the proper functioning of the Service. These cookies cannot be disabled.
Audience Measurement: We analyze site traffic using privacy-preserving tools configured to produce anonymous statistics only.
No Advertising Cookies: We do not use tracking pixels or cookies for advertising purposes.
Consent Exemption: In accordance with CNIL guidelines, strictly necessary cookies and compliant audience measurement tools are exempt from prior consent requirements. As a result, no cookie banner is displayed.

8. Browser Extension

The "Looties — Tech Swag Search" Chrome browser extension (the "Extension") is published by Looties on the Chrome Web Store. The Extension is a toolbar popup that lets users search the public Looties marketplace by keyword and open matching listings on looties.io.

8.1. Data Collected by the Extension

The Extension does not collect, store, or transmit personal data. Specifically, the Extension:

  • does not read, modify, or interact with any web page you visit;
  • does not run any background process and is only active while its popup is open;
  • does not use chrome.storage, cookies, IndexedDB, or any local storage mechanism;
  • does not include any analytics, telemetry, advertising, or third-party SDK;
  • does not require a Looties account.

The only outbound network request made by the Extension is the search query you type in the popup, sent to the public Looties REST API. This request is technically equivalent to typing the same query into the search bar on looties.io. Standard server access logs (request timestamp, anonymised IP address, query string) may be processed by our hosting provider as described in Section 4 (Sub-Processors). These logs are not linked to a user identity by the Extension.

8.2. Permissions

The Extension requests a single, narrowly-scoped host permission for the public Looties REST API host. No other permissions are requested. The Extension does not request access to your tabs, browsing history, location, or any web page content.

8.3. Uninstall

Uninstalling the Extension from chrome://extensions removes it entirely. Because the Extension stores nothing locally, no data persists on your device after uninstall.