Privacy Policy

What ANTLoops collects, and what it does not

This page describes, in plain English, what ANTLoops records when you use this site. It is written from how the site actually works, so every claim here can be checked against its behaviour.

Version 1.0 · Effective on publication

FOUNDER INPUT REQUIRED: This page is Version 1.0 and is not published yet. When it goes live, add the actual publication date here as the effective date; no earlier date should be used.

Who runs ANTLoops

ANTLoops is currently operated by its founder, Anthony Efionayi Osaro. It is an unincorporated, founder-operated project, not a registered company. There is no company registration number and no registered office to publish.

For anything on this page, including requests about your own data, contact observer@antloops.com. This is the site's general contact address and is used temporarily for privacy enquiries.

FOUNDER INPUT REQUIRED: Confirm that observer@antloops.com is actively monitored for privacy enquiries. If it is not, supply a dedicated privacy contact address. No other address has been invented. A physical residential address is deliberately not published.

Depending on where you live, consumer and data protection laws in your country may give you rights over your personal data. This policy does not claim that one country's law governs everyone; it describes the practices that apply to this site.

FOUNDER INPUT REQUIRED: Confirm whether a specific governing law, jurisdiction, or supervisory authority should be named, and whether a legal review of this wording is planned before publication.

What ANTLoops records

  • Your email address when you join the signal list, ask to unlock a Find Your Loop result, or choose to receive the Observer. The address is stored in ANTLoops' own database (Convex) with when it was submitted, which form it came from, and whether it is subscribed, unsubscribed, bounced or marked as a complaint.
  • A verification record for Find Your Loop — your email address, a hashed one-time verification token, and timestamps. The raw token is never stored; only a SHA-256 hash is kept, and the link expires after 30 minutes.
  • An Observer subscription record if you opt in — status (pending confirmation, active, unsubscribed), request and confirmation timestamps, and the source of consent. It becomes active only after you confirm by email.
  • An optional follow-up sequence record if you tick the follow-up box in Find Your Loop — your email address, the consent wording version, when you consented, which of the four emails were sent, whether you unsubscribed, and whether the Email 4 link to MAP IT was clicked. The sequence starts only after your email address is verified.
  • Short-lived abuse-prevention counters — rate limits keyed on the requesting IP address (for form and verification endpoints) and on your email address (one subscribe attempt per day). These rows are deleted by an hourly cleanup job once their window has passed.
  • Optional analytics — only after you press "Accept analytics". Nothing is sent before that.

What Find Your Loop does not store

Your assessment answers are never sent to ANTLoops servers and are never saved. They are scored inside your browser, and discarded when you leave the page. No answer text, score, or result is written to the database.

Two things leave the page during Find Your Loop, and neither contains your answers:

  • If you ask to unlock your result, your email address is sent to ANTLoops so a verification email can be delivered. If you tick the Observer box, that request also creates a pending Observer subscription that only becomes active when you confirm the email link. If you tick the follow-up box, the request records your consent to four follow-up emails; the sequence starts only after the email link is confirmed.
  • A completion notice is sent to the founder containing only the result classification and the leading pattern — never your answers, scores, email address, or any free text. That notice is delivered by email through ANTLoops' email provider.

Optional follow-up emails

The follow-up sequence is separate from The Observer and is never assumed from unlocking a result. It runs only when you tick the separate follow-up box, which is unchecked by default, and only after your email address is verified. You can unlock your full result without ticking it.

For this sequence ANTLoops records: your email address; the verification and consent state; the consent wording version (fyl_nurture_checkbox_v1); which sequence step is next; the time each email was sent; whether you unsubscribed; and whether the Email 4 link to MAP IT was clicked. No assessment answers, scores, or result classifications are stored or used. Click tracking is limited to a yes/no flag and a timestamp; it does not record your IP address, device, or browsing activity.

The purpose is to deliver the four emails you asked for and to understand whether the sequence is useful. The basis is your explicit consent, which you can withdraw at any time using the unsubscribe link in any of the emails. The emails are delivered through Resend, which processes the recipient address and message on ANTLoops' behalf.

Unsubscribing stops the remaining follow-up emails immediately. It does not affect your Find Your Loop access or your Observer subscription, which have their own separate unsubscribe links.

Analytics, and only with your permission

ANTLoops uses Google Analytics 4 (measurement ID G-Q7R58JMVXN). The analytics script is not loaded at all until you choose "Accept analytics". If you choose "Reject", the script is never loaded, analytics storage is set to denied, and any analytics cookies already present for this site are removed.

When analytics is enabled, the site sends page views and a fixed list of product events (for example: a form submitted, Find Your Loop started, a question answered, a result viewed). Those events carry no email address, no answer text, no score, no URL parameters and no user identifier. ANTLoops never sends personal data to Google.

You can change your choice at any time: the Privacy / Cookie settings control in the footer reopens the consent panel. Rejecting again removes analytics cookies and stops all future analytics events.

Cookies and browser storage

ANTLoops sets no advertising cookies and no tracking cookies of its own. There are three separate things to know about.

Essential and security cookies set by ANTLoops. These keep protected areas working and are not used for tracking:

  • One httpOnly session cookie for the password-protected internal documentation area. It contains a signed session value only, is not readable by page scripts, and exists only after the access code is entered.
  • A sign-in session for the founder's own admin area, created only when the founder signs in with a one-time email code.

Google Analytics cookies, only after consent. _ga and _ga_* are set by Google Analytics and appear only if you press "Accept analytics". Rejecting removes them and blocks them from being set again.

Consent values stored in localStorage. These are not cookies and never leave your browser:

  • antloops-analytics-consent — your analytics choice ("granted" or "rejected"). No expiry; it stays until you change it.
  • ga-disable-G-Q7R58JMVXN — written when you reject analytics, so the analytics library refuses to send anything even if it were somehow loaded.

Who processes the data

ANTLoops runs on a small set of service providers. These are the ones actually in use:

  • Convex — database and server functions that store subscriber and verification records. The production deployment is hosted in the EU (eu-west-1 region).
  • Resend — sends the transactional emails: the Observer welcome, the Find Your Loop verification email, the optional four-email follow-up sequence, and internal completion notices.
  • Google Analytics 4 — optional analytics, only after consent.
  • Macaly — hosts and serves the website. Requests pass through Cloudflare and the Macaly edge before reaching the site, which is how the site receives standard technical request data such as an IP address.
  • Macaly platform OTP service — part of the hosting platform. It delivers the one-time sign-in code for the founder's own admin area. It is used only for that sign-in and never for visitor emails.

FOUNDER INPUT REQUIRED: Confirm the provider details to publish: legal names, registered locations, and whether data-processing agreements or transfer safeguards are in place for Convex, Resend, Google, Macaly and Cloudflare. ANTLoops has not verified any of those agreements, so this page does not claim them.

How long data is kept

Enforced automatically: a Find Your Loop verification link stops working after 30 minutes. Abandoned Find Your Loop verification records that were never confirmed are deleted after 30 days. Verified Find Your Loop identity records are deleted about 6 months after verification. Abuse-prevention counters are deleted hourly once their window has passed. These limits are built into the code and run on a daily or hourly schedule.

Kept while you are subscribed: active signal list and Observer subscription records are kept while you remain subscribed.

After you unsubscribe: records are stripped back to the minimum suppression details needed to avoid contacting you again, rather than being kept as a marketing profile. That suppression record is deliberately kept so an accidental future send cannot happen, which means unsubscribe does not erase your address by itself.

Follow-up sequence records: a completed sequence is kept for up to 12 months so early performance can be reviewed, then reviewed again and minimised or deleted if it is no longer needed. That review is a manual step, not an automatic deletion job. When you unsubscribe or are suppressed, the sequence record is reduced to the minimum needed to honour the opt-out: your email address, the suppression status, and the relevant timestamp. A suppressed record keeps only the status and reason needed to avoid further sends. Consent records are kept only as long as reasonably necessary to evidence consent and meet applicable requirements; there is no fixed deletion date.

Two limits are not automatic. Deleting the suppression record, and deleting an active subscription before you unsubscribe, both happen on request rather than on a timer. Email delivery metadata held by the email provider follows that provider's own retention, which ANTLoops does not control or shorten.

Unsubscribing and removing your data

Every ANTLoops email contains an unsubscribe link. Signal list emails, Observer emails, and the four follow-up emails each use their own link. The link opens a confirmation page and only unsubscribes after you confirm. Your email address alone cannot be used to unsubscribe someone, so nobody can remove you by guessing your address. Unsubscribing from the Observer does not affect your Find Your Loop access.

To have your records deleted rather than just unsubscribed, email observer@antloops.com. There is no self-service deletion control yet. ANTLoops aims to respond to privacy requests within 30 days, subject to applicable law; that is a working target, not a statutory deadline that applies everywhere.

FOUNDER INPUT REQUIRED: Confirm the deletion process: who handles requests, whether observer@antloops.com is the right inbox for them, and whether the 30-day target should be stated as a commitment.

Your choices and rights

You can decline analytics and use the entire site, including Find Your Loop. You can unsubscribe from emails at any time. You can ask what is held about you, ask for a copy, ask for correction, or ask for deletion. Which rights apply, and how they can be exercised, depends on the law that applies where you live.

FOUNDER INPUT REQUIRED: Confirm which rights wording should be published, and whether a specific complaints route (for example to a national data protection authority) must be named. No jurisdiction has been established, so none is asserted here.

Age

ANTLoops and Find Your Loop are intended for people aged 18 and over. ANTLoops does not knowingly collect email addresses from anyone under 18.

FOUNDER INPUT REQUIRED: Confirm the 18+ minimum age before publication. No age-gating functionality has been added; if a different minimum age is required, this wording and the flow must change together.

Changes to this policy

When this policy changes, the version number and effective date at the top of the page change with it. Material changes affecting email subscribers will be announced in an email.

Version 1.0 · Audited against the live implementation on 31 October 2026 · Awaiting publication

Questions about this page can go to observer@antloops.com. You can also read the contact page.

Optional analytics help ANTLoops understand what resonates. No site functionality depends on them, your choice is stored only on this device, and you can change it later.