Privacy and trust

This page describes what this build of the site actually does. It is not legal advice or a finished privacy policy; the site operator must review it before the site is made public.

What we collect

• Survey: your audience/role, responsibility, tools, current testing approach, automation volume, failure frequency, how problems are discovered, biggest consequence, perceived value of repeatable tests/regression reports, early-version interest, and any optional reliability-problem text you submit. An email address is stored only if you separately agree to research or possible future-pilot follow-up.
• Creator/partner form: the choices and optional text you submit, and the email address you enter (required, with your consent to be contacted).
• A timestamp for each submission.

What we do not collect

• Your IP address, browser details or referrer are not saved with your answers. (Your address is held in the server's memory for up to an hour to limit repeated submissions, and is discarded on restart.)
• Server logs: like any website, the web server (and any proxy or host in front of it) writes standard access logs that include your IP address, the page requested and the time. They do not contain what you type into the forms. How long they are kept is set by whoever runs the server and has not been decided or published yet.
• No analytics, advertising trackers, third-party scripts, fonts or embedded content.
• Cookies: one strictly necessary security cookie (site_csrf) that protects the forms. It is set only when you open the survey or the creator form, and it is not used to identify you.

How it is used and stored

• Answers are stored in a database file on the site's own server and read only by the site operator. They are used to understand automation reliability problems, decide what to build, evaluate interest in a possible future pilot and, where you separately agreed, to contact you about this research or a possible future pilot.
• The server is run by a hosting provider, which technically holds the data on the operator's behalf. The provider has not been chosen yet, and this page will name it before launch.
• Nothing is sold or shared with advertisers. This build sends no email automatically, and does not pass answers to any other service.
• Submitting the survey does not give marketing consent. We do not use survey submissions for marketing. If that ever changes, we will ask for separate consent first.
• Please do not type credentials, client names or private payloads into free-text boxes.

Deleting your data

The operator can look up, export and delete everything stored under an email address, delete a single entry, or purge entries by age. Survey answers submitted without an email address cannot be linked to a person, so they cannot be found or deleted on request. No automatic deletion schedule is configured yet; the retention period is still a decision for the operator and must be published here before launch. The operator may also keep backup copies of the database, which contain the same data; how long backups are kept has not been decided either, and a deletion request will need to cover them. A contact address has not been published yet.

The LoopSpec tool itself

• LoopSpec runs on your own computer, binds to 127.0.0.1, and does not send your tests or results to us.
• Stored header values and URL secrets are encrypted at rest with a key kept outside the database. This reduces exposure of a copied database; it is not a guarantee, and the tool is not designed for multi-user or public hosting.
• We hold no security certifications and have had no independent security audit.

AI assistant

This site does not currently run an AI assistant. If one is added, it will say clearly that it is AI, and the forms will keep working without it.