Privacy

Last updated: 29 September 2026

Who we are

Liago Studio (publisher of lopta.dev, see the legal notice) is the data controller for the website and the access-request form. Contact: contact [at] lopta.dev.

What we collect on this website

• Access requests. When you request an API key, we collect your first name, last name, company, work email, the page and campaign parameters (UTM) you arrived with, and your approximate country. We use them only to reply to your request and discuss access to Lopta. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering business enquiries. We keep them for up to 3 years after our last exchange, then delete them.
• Audience measurement. We use Umami, a cookieless analytics tool. It records aggregate, anonymous visit data (pages, referrer, campaign, device type, country) and does not identify you. No consent banner is required because no cookie or tracker is stored on your device.
• Security. The form is protected by Cloudflare Turnstile, which processes technical signals from your browser to tell humans from bots.

Who processes it

• Cloudflare, Inc. — website hosting, form processing, bot protection (Turnstile).
• Umami Software, Inc. — cookieless audience measurement.
• Slack Technologies, LLC — internal notification of access requests.
• OVHcloud — email.

Some of these providers are located in the United States. Transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

Your rights

You can access, correct or delete your data, object to its processing or ask for its portability by writing to contact [at] lopta.dev. We answer within one month. You can also lodge a complaint with the CNIL (cnil.fr).

Data processing for API customers

These commitments apply to audio submitted to the Lopta API.

• Intended content. Lopta is built for content that is public or intended to be public: podcasts, videos, broadcasts, talks and archives. It is not currently designed for confidential meetings, HR calls, medical consultations, legal recordings or private corporate audio.
• Where audio is processed. Jobs are processed across Lopta's distributed compute network, which includes edge devices. By using Lopta you accept processing on consumer devices.
• Retention. Audio is deleted as soon as processing ends, whether the job succeeds or fails. Transcripts are kept for 1 hour so you can fetch them, then deleted.
• No training. We never use your audio or transcripts to train models.

A data processing agreement (DPA) is available on request.