Last updated: 13 July 2026.
The controller for your personal data is Docutati, which operates the Loupe service (Netherlands, KvK 42095190, BTW-id NL005492040B03). Contact: [email protected].
The website address (URL) you submit for an audit, the email address you provide at checkout (we don't ask for one before you decide to pay), and basic technical request data. We use your email only to deliver your audit report and transactional messages about your order.
When you submit a URL, we fetch that single public page and analyse it on our own private infrastructure located in the EU. The prioritised recommendations are written by a language model we run ourselves, in the EU. Your URL and report are never sent to any third-party AI provider and are never used to train any model.
Submitted URLs, generated reports and scan data are automatically and permanently deleted from our systems within 7 days. We retain minimal order records (e.g. payment reference, email) only as required for accounting and legal obligations.
To keep the service secure and prevent abuse, our servers keep minimal technical logs (such as the IP address, timestamp and requested page). These logs are retained for up to 90 days and are not used to profile or track you across sites. The page you submit is fetched and parsed by an isolated worker that can reach only the public web — never our internal network — and every target is validated first so it cannot be used to reach private or internal addresses.
If you choose "Continue with Google" or "Continue with Microsoft" to fill in your email address, we receive only your verified email address from that provider — nothing else, and the sites you audit are never shared with them. Typing your email manually works exactly the same. The sign-in is purely optional.
Payments are handled by Stripe, which acts as an independent processor of your payment data. We never receive or store your card details. See Stripe's privacy policy for details.
Browsing Loupe sets no cookies at all — no tracking cookies, no analytics cookies, and therefore no cookie banner. If you choose the optional "Continue with Google/Microsoft" sign-in, one strictly-necessary session cookie is set to perform that sign-in (it holds the sign-in state and your verified email, expires after 1 hour, and is never used for tracking). Your browser's local storage is used only to let you resume your own recent audits on this device. That information never leaves your browser.
We use privacy-friendly, cookieless analytics that do not track you across sites and do not collect personal information. No advertising or third-party trackers are used.
Under the GDPR you may request access to, correction of, or deletion of your personal data. Contact [email protected].
Audit my website →