privacy

what we collect

• server logs. when you visit a page, the server sees your IP address, what URL you requested, when, and which browser. cloudflare keeps this for 7 days then deletes it. same as every site on the internet.
• analytics. page views, anonymized visitor counts, referrer. no cross-site tracking, no ad pixels, no audience-builder bullshit. providers named in "third parties" below — short version: posthog (cookieless, in-memory only) and cloudflare web analytics (cookieless client-side beacon).
• newsletter signups. if you enter your email, it goes to beehiiv (our newsletter tool). double opt-in — you click a confirm link before anything is sent, and that click is your consent. used only to email you when there's news. unsubscribe any time.
• audius interactions. the homepage embeds your own browser audio context to play tracks. so the sound visualizer works in every browser, the audio passes through lookoutlo.ren's own server on its way from audius to you. that server doesn't store the audio or keep any record of what you played. the audius platform itself records plays per its own privacy policy.
• look out looper. the game at lookoutlo.ren/looper keeps your best times, ghosts and settings in your own browser. if you put a run on a board, we store your initials, your time, your car, a recording of your inputs and your car's path (so anyone can watch it, and the game can check it), and a hash of a random token your browser makes. to limit abuse we keep a salted hash of your network address for 30 days; the address itself is never stored. cloudflare turnstile checks that a run comes from a person (see cloudflare's turnstile privacy addendum). the game counts races and board submissions in the same cookieless analytics as the rest of the site. songs stream straight from audius, so audius sees your ip address when a song plays (audius privacy policy).

what we don't collect

• personal information beyond what's listed above.
• browsing history outside lookoutlo.ren.
• data for retargeting or ad networks. (no facebook pixel, no google ads, no tiktok pixel.)
• data from minors. if you're under 18, please bounce.

cookies

we don't set tracking cookies, so there's no cookie banner. the analytics we use are cookieless: page views and on-page interaction are counted with posthog (kept in memory only — no cross-session identifier) and cloudflare's privacy-first traffic beacon. nothing follows you across sites. the newsletter signup doesn't change this: your email posts straight to beehiiv through our own server, so no beehiiv script and no beehiiv cookie ever loads in your browser. that's it.

your rights

if you've signed up for the newsletter or otherwise gave us your email, email lol@lookoutlo.ren and ask us to:

• tell you what we have on file about you
• delete it
• export it
• stop emailing you

any of those, no questions, no friction. we'll respond within 14 days. usually faster.

third parties

services we use that may see some of your data:

• cloudflare (hosting + DNS + web analytics) — sees IP + request data for caching, DDoS protection, and aggregate traffic counts. cloudflare's web analytics is a cookieless client-side beacon (loads from static.cloudflareinsights.com; no cookies, no cross-site tracking) and honors the same opt-out as posthog below. see cloudflare privacy policy. on the look out looper boards, cloudflare turnstile checks that a run comes from a person; see cloudflare's turnstile privacy addendum
• posthog (product analytics) — counts page views and on-page interactions. data sent to posthog's EU datacenter (eu.i.posthog.com), so no cross-atlantic data transfer for EU visitors. cookieless — no cross-session identifier. opt out by appending ?__no_track=1 to any URL, or by setting the cookie lol_no_track=1 in your browser. see posthog privacy policy
• audius (music streaming) — your audio playback runs through their decentralized network; see audius privacy policy
• beehiiv (newsletter) — stores the email you submit and sees open/click events on the emails you confirm. beehiiv is US-based, so for EU/UK subscribers the transfer relies on standard contractual clauses + the EU-US data privacy framework. see beehiiv privacy + their GDPR page
• google search console + bing webmaster tools — receive aggregate search query data, not tied to you

that's the full list. if it changes, this page updates.

updates

if this policy changes, the "last updated" date at the top changes. material changes (new third party, new data type collected) get announced in the next newsletter.

questions

email lol@lookoutlo.ren. address things to "look out loren" — there's no fancy LLC name to use yet.