Skip to content

Privacy

What this site collects.

Short version: almost nothing, and nothing at all unless you type it in. Every page here is a static file, every tool computes in your browser, and the two things that do collect something are named below with what they collect and where it goes.
Last updated
17 October 2026

If you fill in a form

The updates form asks for an email address, and optionally your role and what you are building. The contact form asks the same and adds a name, a company, a topic and a free text field. The waitlist form adds optional questions about your company: entity type, revenue stage, the books you use, the states you operate in, whether you are raising and what you want help with. Everything in those fields is what you typed, and none of it is required except the email address we would reply to.

The form also records where you were when you submitted it: the page, the referring URL, any utm_ parameters in the address bar, and the anonymous analytics id described below, so a reply can be matched to the question. Your IP address, your browser’s user agent and the approximate location our host derives from the IP (city, region and country) are recorded with the submission; the IP is also used to rate-limit the endpoint against bots.

Submissions go to a Google Sheet owned by Lopifi through a private webhook. They are not sold, not shared with advertisers, and not used to email you anything you did not ask for. To have a submission deleted, reply to any email from us or write to the address at the bottom of this page and it will be removed from the sheet.

If you just read

Page views, the time a page was left, a small set of named events — an install command copied, a documentation page read to the end — and clicks on links and buttons are recorded in PostHog. It is proxied through this site’s own origin at /ingest, which means it is not a third-party request, and it stores an anonymous identifier in localStorage and a cookie so two visits from the same browser count as one person rather than two.

Session recording is switched off. There is no advertising network on this site, no remarketing pixel, and no third-party script that is not named here. Blocking the analytics request breaks nothing: the page is a static file and does not wait for it.

What never leaves your browser

The tools and the workbook compute entirely in the page. Figures you paste into them are never uploaded, never logged and never seen by us — which matters, because the figures people paste into them are client figures. The Chrome extension is the same: the PDF stays on your machine and its AI runs on-device against Chrome’s built-in model.

Some things are remembered in your own browser’s localStorage so they survive a reload: the workbook’s sheets, your answers to the course exercises, the table density you chose and any column widths you dragged. They are stored on your device only, are never sent to us, and clearing this site’s data in your browser removes them.

Where the site runs

Lopifi is hosted on Vercel, which terminates the connection and keeps standard server logs — IP address, user agent, the path requested — for a limited period as part of operating and protecting the service. Fonts are served from this origin rather than from Google Fonts, so reading a page makes no request to a third party at all.

Asking us about your data

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, and you do not have to explain why. Write to hello@lopifi.com and a person will action it. If something on this page turns out not to match what the code does, that is a bug — tell us and it will be fixed rather than argued with.