LocalLoop ("we", "us") operates the LocalLoop.pro community mapping platform. We are based in New South Wales, Australia. For privacy questions, use citylocalloop@gmail.com until the dedicated privacy@localloop.pro alias is verified live.
| Category | Examples | Lawful basis | Retention |
|---|---|---|---|
| Location | Approximate coordinates when you opt-in to geolocation; pin coordinates you create. | Consent (GDPR Art. 6(1)(a)); legitimate interest for map function. | While your pin exists; ephemeral browser coords not stored. |
| News posts | Title, body, optional photo, category, suburb. | Performance of contract (Art. 6(1)(b)). | Until you delete or 24 months after last activity. |
| Account data | Email, phone (if SMS OTP used), display name, role. | Performance of contract. | Until account deletion is requested and processed; phone hashed where feasible. |
| Device + diagnostics | User-agent, error stack traces (Sentry), Core Web Vitals. | Legitimate interest (service quality). | 30 days (Sentry default), 90 days analytics aggregates. |
| Functional storage | localStorage flags (onboarded, prefs, A/B bucket, state cache). No third-party tracking cookies. | Strictly necessary. | Until you clear browser storage. |
Each processor is bound by a Data Processing Agreement. International transfers rely on SCCs where applicable.
Under GDPR (and Australian APPs) you may: access, rectify, erase, restrict, port, and object to processing. The current repo does not yet ship a production-ready self-serve Settings → Privacy flow, so use citylocalloop@gmail.com for privacy requests until the dedicated privacy@localloop.pro alias and full self-serve delete workflow are verified live. We respond through the verified privacy contact path within 30 days.
HTTPS-only, strict CSP, HSTS preload, Supabase row-level security, secrets rotated quarterly, dependency audits in CI.
LocalLoop is not directed at children under 13. We do not knowingly collect data from minors. Contact us to request deletion if a child has registered.
Material changes are announced in-app at least 14 days before taking effect. Previous versions archived under /legal/archive/.
You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or your local EU Supervisory Authority.