Privacy
This is short because there is little to say. The editor runs in your browser and nothing you draw is sent anywhere, unless you take it somewhere yourself.
What you draw
The network you are working on is kept in your browser's own storage, on your machine. It is not uploaded, not backed up and not visible to us. Clearing your browser data removes it, which is why the editor says, in more than one place, that the exported file is the real save.
There are no accounts at the moment. When accounts arrive — so that a network can follow you between machines — they will store an email address and the networks you choose to keep, and this page will say so before that is switched on, not after.
Taking a map somewhere else
There is one way a map leaves your browser, and it is one you carry out yourself.
Training mode writes your map out as a session for a chatbot to facilitate. The app does not send it anywhere. It shows you the whole text, lets you edit it first, and waits for you to copy it. What you paste, and where you paste it, is yours to decide.
If you do paste it into a chatbot, your network of commitments goes to whoever runs that chatbot, under their terms rather than ours. That includes the names on it, which belong to people who have not been here and have not agreed to anything. There is a link on that screen to a page on claude.ai built to read this kind of text: it is a page somebody made, it is not part of this site, and it receives nothing until you paste. None of this is a good idea for work that is confidential.
The reason the app writes a document for you to carry instead of calling a model itself is exactly this. It is the only arrangement in which nothing you draw leaving your browser stays a fact about how the thing is built, rather than a promise you would have to take on trust.
What the server sees
The pages are served by Firebase Hosting, which is Google. Like every web server, it records requests: the address they came from, the page asked for, the time, and what browser asked. Those logs sit with Google as our processor and we do not use them to build any picture of a person.
What is measured, if you allow it
There is one measurement tool here, Google Analytics, and it is switched off until you say otherwise. The first time you arrive a bar asks. Say no, or close the tab without answering, and nothing is loaded at all — not the tag, not a cookieless ping, no request to Google of any kind. Say yes and it is loaded then and not before.
What it counts, if you allow it, is pages: which ones get read, roughly where the visit came from, and what kind of browser it was.
In the editor it counts a short list of acts, and it is worth being exact about it, because the editor is where the thing you would not want sent actually lives. It records that a map was opened and which of the five doors it came through; that a run was started, and how many commitments were in it; that somebody stood in for one of the people in it, or for all of them, or watched; which act they took, in the notation's own words — agree, decline, counter-offer, report complete and the rest; that a run reached the end; that a commitment or a note was added; that the map was checked for what is wrong with it; that a picture was made, of the map or of the people, and whether it was copied or saved; that the map was copied out as a document; that the training session was opened, whether it was copied, and whether anybody went on to the runner it was written for; that the map was saved; and which of the four looks it was drawn in.
That is the whole list. It counts that these happened and never what was in them: not a commitment, not a condition, not a word of a note, and above all not the name of anybody on the map — those are real people who have not been here and could not have agreed to anything. This is not left to care. Every one of those acts names in the code exactly which facts it may carry, and each of those is either a number or one of a fixed set of words this site chose; anything else is dropped before it is sent. Nothing you draw is sent anywhere, because it never leaves your browser at all.
Your answer is kept in this browser and nothing else, so it is remembered on the next visit and asked again if you clear your browser. Changing your mind means clearing the site's data, and if that is a nuisance, write to us and we will make it a link on this page.
Cookies
If you agreed to the above, Google Analytics sets its own — _ga and one named for the property — which is what the bar was asking about, and the only reason there is a bar at all.
Everything else your browser keeps here is functional and first-party: the network you are drawing, the file it was last saved to, and your answer about measurement. All of it exists so that closing the tab does not lose your work, none of it is sent anywhere, and none of it is used to recognise you.
Advertising, if it is ever added, will bring its own consent step in the form Google requires for visitors in the UK and the EEA. There is none today.
If you write to us
Mail sent to hello@4-loop.com reaches a person, and is kept only so the conversation makes sense. It is not added to any list.
Your rights
Where data protection law applies to you — the UK and EU GDPR, and comparable law elsewhere — you have the right to know what is held about you, to have it corrected or deleted, and to have a copy of it. Ask at the address above. Today the honest answer to most such requests is that we hold nothing but any correspondence you started, and your networks have never left your machine. When that stops being true, this page will change first.
Who is behind it
This site is Pablo Flores's, and there is no company behind it — no organisation, nobody being sold anything, and no arrangement with a third party that any of this data could be part of. Write to hello@4-loop.com about anything here, including this page.