Privacy policy

Loftcraft is made by Amit Digga, based in India. This page says what the site collects, why, who sees it, how long it is kept, and how to ask for it to be deleted. Effective 25 October 2026.

The short version

There are no accounts. Your designs are saved in your own browser, not on my servers.
Anonymous usage measurement is on, because it is how I find out what to fix and what to build next. In the EU, EEA, UK and Switzerland it stays off until you allow it.
Nothing is sold, and there is no mailing list.

Information I collect

Your designs. Walls, furniture, colours and any floor plan image you upload are stored in your browser's local storage. They never reach me.
Renders. Render mode makes its pictures on your own computer, in the browser. The design and the pictures are not sent anywhere.
Feedback. When you send feedback, the title, details and importance you chose are stored in my database. Stored with them are a random ID kept in your browser, so I can tell several messages from the same browser apart, and a scrambled form of your IP address that cannot be turned back into the address and changes every day. Both are used only to stop spam by limiting how many messages one browser or network can send.
Bot check. The feedback form uses Cloudflare Turnstile to check that a person, not a script, is sending it, using signals from your browser.
Usage measurement. Google Analytics 4 records the pages you view (project links are replaced by a placeholder, so your individual projects are not identified), actions such as drawing a wall, placing furniture or exporting a floor plan, and the first edit of each session together with the age of the project in days. Google derives an approximate location and your device and browser type from the request, and sets a random ID in a cookie so repeat visits from the same browser can be counted. I see totals and trends, not who you are.
Hosting logs and traffic statistics. The site is served by Cloudflare. Every request passes through it, and it records the IP address, the country it comes from, the page or file asked for, the browser and device type, and the time. Cloudflare uses this for security and reliability, and shows me totals from it: requests, visits, countries, browsers, pages and errors. I do not see individual visitors there.
Your country, to decide whether to ask. When a page first loads, it asks Cloudflare which country the connection comes from. Only the result (ask first, or measure by default) is kept, in this browser tab, and it is not sent anywhere.

Please do not put passwords, payment details or other sensitive information in a design or a feedback message.

How I use it

To run the builder and save your designs, because you asked for it.
To keep the site reliable and secure, and to keep spam out of feedback: my legitimate interest in running a working service.
To understand which features get used, where people get stuck, and what to improve. Loftcraft is free with no accounts, so this measurement is the only way I learn what is working. Outside the EU, EEA, UK and Switzerland this rests on my legitimate interest in improving the product. Inside them it rests on your consent.

I do not sell data, share it with advertisers, or run a mailing list. There are no partners.

Measurement

Measurement uses Google Analytics 4, with advertising features, ad personalisation and Google signals switched off, so the data is not used for ads or to follow you across other sites.

In the EU, EEA, UK and Switzerland it is off until you choose Allow measurement in the banner.
Everywhere else it is on when you arrive. If your browser sends a Global Privacy Control signal, it stays off.

Wherever you are, you can turn it off or on for this browser here:

Cookies and browser storage

Needed for the site to work. These cannot be switched off here, because the site does not work without them:

Your project list and each project's design, in local storage (until you delete the project or clear site data).
Preferences: display quality, day or night scene, and whether you chose to open the full editor on a phone.
Your measurement choice, and whether this tab is asked first.
The random feedback ID, created the first time you send feedback.
Cloudflare's security cookies, such as __cf_bm or cf_clearance, which Cloudflare may set when it checks traffic for bots and attacks.

Measurement. Google Analytics sets two cookies, _ga and _ga_<ID>, each holding a random ID that lasts up to two years. The site also keeps a per-tab flag so the first-edit event fires once per session. None of these are set while measurement is off.

Service providers and links

Cloudflare serves the site, protects it from attacks, runs the feedback service, checks feedback for bots with Turnstile, keeps request logs, and gives me traffic statistics from them.
Supabase hosts the database where feedback is stored.
Google Analytics 4 for measurement, as described above.

These providers may process data in other countries, including the United States, under their own data protection terms. External links on this site lead to services with their own policies.

Retention and security

Designs: in your browser until you delete them or clear site data. I hold no copy.
Measurement data: 14 months, the retention set in Google Analytics.
Feedback, with its browser ID and scrambled address: as long as it is useful, and deleted on request.
Hosting logs: Cloudflare's standard short retention. The traffic totals I see contain no individual visitors.

The site is served over HTTPS. No system is fully secure, so please keep a copy of any design you care about, for example as an exported floor plan.

Your choices and rights

You can access, correct, delete, or object to the use of information about you, withdraw consent at any time, ask for a copy in a portable form, and complain to a data protection authority. Turning measurement off with the button above takes effect at once. Designs and preferences are under your control in your browser. For anything else, including complaints, email [email protected]. I may ask you to confirm your identity first.

Loftcraft is not directed at children under 16.

Changes to this policy

The effective date at the top is the version. If what is collected changes, this page changes with it, and you will be asked for consent again where that applies.