# Loops privacy rating

Email platform for software companies that combines marketing campaigns, automated sequences and a transactional email API.

## Summary

Loops is not graded yet: 54% of its criteria have evidence, and 60% is needed. It meets 2 of 12 criteria: TLS configuration and open and click tracking off by default. It partly meets no ads or data sales and security headers. It does not meet open source and no trackers or telemetry. Still needing evidence: independent audit, transparency report, tells users about requests, message content deleted after delivery, encrypted delivery can be enforced and EU data location. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://loops.so
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Amplitude, Google Analytics, Google Fonts (not scored), Google Tag Manager, X (Twitter) Pixel
- Category: [Email sending services](https://privacyratings.com/email-sending/)
- Grade: Not graded (54% evidence)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy lists Google Analytics and Segment, and the website loads Google Tag Manager, Amplitude, PostHog and VWO. | https://loops.so/privacy |
| No ads or data sales | Partial | Funded by paid plans and states personal data is not sold, but advertising cookies are used on the website. | https://loops.so/privacy |
| Independent audit | Unknown |  |  |
| Transparency report | Unknown |  |  |
| Tells users about requests | Unknown |  |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=loops.so&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=loops.so |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Message content deleted after delivery | Unknown |  |  |
| Open and click tracking off by default | Yes | Open and click tracking are off for transactional email. Marketing campaigns are tracked. | https://loops.so/docs/transactional |
| Encrypted delivery can be enforced | Unknown |  |  |
| EU data location | Unknown |  |  |

Source: https://privacyratings.com/email-sending/loops/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/email-sending/loops.md