Privacy Policy
Loopify.pro · FOP Bokhonko Zhanna, Ukraine · Last updated: September 2026
Contents
1Data Controller
Loopify (loopify.pro) is operated by FOP Bokhonko Zhanna, a sole trader registered in Ukraine. This policy explains how personal data is processed when providing the Loopify YouTube streaming service.
Privacy contact: support@loopify.pro.
2Data We Collect
| Data | Why |
|---|---|
| Email, username/display name | Account access, notifications and support |
| Password hash | Authentication; passwords are not stored in plain text |
| IP, login/activity and device metadata | Security, abuse prevention and diagnostics |
| Uploaded videos and thumbnails | Storage, optimization and streaming |
| YouTube stream keys and stream configuration | RTMPS streaming to your destination |
| Google sign-in data | Email, name and Google account ID for authentication |
| YouTube Connect data | Channel details and a separately authorized encrypted refresh grant when you choose YouTube Connect |
| Payment references/status | Subscription confirmation, fraud prevention and accounting; Loopify does not store card numbers |
| Telegram identifiers | Notifications, support, linking and Mini App when enabled by you |
| Language/settings | Interface preferences |
We do not sell personal data or use advertising/behavioural profiling. Uploaded media is stored and processed to provide Loopify features.
3Google & YouTube API Data
When you enable YouTube Connect, Loopify requests the youtube.force-ssl OAuth scope so it can create and manage live stream ingest resources and broadcasts on your behalf, bind a managed ingest to a broadcast, and read channel/broadcast information needed for the feature, including monetization eligibility/status when you explicitly request it.
Loopify stores your YouTube channel identifiers and an encrypted OAuth refresh grant so the integration can continue working without asking you to sign in again for every action. Short-lived Google access tokens are not persisted. The refresh grant is encrypted at rest using an application-derived encryption key.
Google/YouTube user data obtained through this integration is used only to provide and improve the user-facing YouTube Connect functionality you requested. We do not sell it, use it for advertising or behavioural profiling, disclose it to data brokers, or use it to train AI/ML models.
When you disconnect YouTube, Loopify attempts to revoke the Google authorization and removes the locally stored refresh grant plus channel-specific managed resource identifiers. Disconnecting does not silently delete your YouTube broadcasts. Account deletion removes account-owned integration data after the restore window, subject only to records we must retain for legal/accounting/security reasons; YouTube OAuth credentials are not retained for those purposes.
4Google API Limited Use
Loopify's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy.
5Legal Bases
- Contract performance: account, media, stream configuration and payment references needed to provide the Service.
- Legitimate interests: security logs, abuse prevention, reliability and fraud prevention.
- Consent: optional integrations or marketing communications where consent is required. Consent can be withdrawn for optional processing.
- Legal obligations: records required for accounting, tax, dispute resolution or compliance.
6Third-Party Providers
| Provider | Role |
|---|---|
| Hetzner Online GmbH | Hosting and primary data storage in Germany / EU |
| Brevo (Sendinblue) | Transactional email delivery |
| Monobank | Payment processing |
| CryptoBot / Telegram | Crypto payments, notifications, support and Mini App features you choose |
| Google / YouTube | Google sign-in; separately authorized YouTube Connect and YouTube APIs |
| ImprovMX | Email forwarding |
We do not share personal data with third parties for advertising or profiling.
7Data Storage
Core account data and uploaded media are stored on Hetzner infrastructure in Germany. Data you intentionally send through integrations, payment services or destination platforms is also processed by those providers under their own terms.
8Retention Periods
- Active account data and media: while needed to provide the account/service, unless deleted earlier by you.
- Account deletion: access is disabled immediately, a 7-day restore window follows, then account-owned data is removed. Payment/audit records may remain where required for legal, accounting or fraud-prevention purposes.
- Security/activity metadata: up to 90 days.
- Technical stream/playlist logs: up to 30 days.
- Trial network HMAC claim: up to 30 days for anti-abuse; it stores a keyed network hash rather than the original IP.
- Unverified signups: abandoned accounts that still require email verification and have no meaningful account activity may be removed after 7 days.
9Your Privacy Rights
Depending on applicable law, including GDPR where applicable, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent for consent-based processing. Send requests to support@loopify.pro. We aim to respond within the legally required timeframe.
10International Transfers
Some providers, including Google/YouTube, Telegram/CryptoBot and email/payment infrastructure, may process data outside your country. Data is sent only when required for the feature you use and is handled under the provider’s terms and applicable transfer mechanisms.
11Cookies
Loopify uses essential cookies only; we do not use advertising or behavioural tracking cookies.
| Cookie | Purpose | Typical lifetime |
|---|---|---|
| loopify_session | Login, CSRF/session state and language | Up to 7 days |
| cookie_consent | Remember that the cookie notice was dismissed | 1 year |
| site_access | Temporary early-access gate while enabled | 30 days |
| loopify_restore | Secure account restoration after deletion | Up to 7 days, only after deletion |
12Age, Security Incidents, Changes & Contact
Minimum age: Loopify is intended for users aged 18 and over.
Security incidents: where required by applicable law, we will notify competent authorities and affected users of qualifying personal-data breaches.
Changes: material privacy changes may be communicated before taking effect where required; the update date on this page will change.
Complaints: you may contact your competent data-protection authority. Privacy enquiries: support@loopify.pro.