Cookie Policy

Loam Pty Ltd — Last updated: March 27, 2026

This policy explains how Loam Pty Ltd (“Loam”, “we”, “us”) uses cookies and similar tracking technologies on loam.ink and app.loam.ink. We keep this simple and straightforward.

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your browser on subsequent visits, remember your preferences, keep you logged in, and collect information about how the site is used.

Besides cookies, we may also use similar technologies such as local storage, session storage, and pixel tags (also called web beacons). This policy covers all such tracking technologies and refers to them collectively as “cookies”.

2. How We Use Cookies

We use cookies for the following purposes:

  • Authentication & security — to keep you signed in securely and protect against cross-site request forgery (CSRF).
  • User preferences — to remember settings such as your chosen theme and layout so they persist between sessions.
  • Analytics — to understand how visitors interact with Loam so we can improve the product and manage infrastructure costs.
  • Consent management — to record your cookie preferences so we honour them on every visit.
  • Marketing (planned) — we intend to run advertising campaigns in the future and will add marketing cookies at that time, with a fresh consent prompt.

We do not sell the data collected through cookies to third parties.

The table below lists the categories of cookies we use, what they do, how long they last, and whether they are required for the service to function.

Category Cookie / Type Purpose Duration Required?
Strictly Necessary Session cookie
loam_session		 Maintains your authenticated session so you stay logged in while using the app. Session (deleted when browser closes) Yes
Strictly Necessary Authentication token
loam_auth_token		 Persistent authentication token used to restore your session on return visits without requiring a new login. 30 days Yes
Strictly Necessary CSRF token
loam_csrf		 Security token that prevents cross-site request forgery attacks on form submissions and API calls. Session Yes
Strictly Necessary Consent preferences
loam_cookie_consent		 Stores your cookie consent choices so we do not prompt you on every page load and can honour your opt-out selections. 12 months Yes
Functional Theme preference
loam_theme		 Remembers your chosen colour theme (light, dark, system) so it is applied consistently across sessions. 12 months No
Functional Layout settings
loam_layout		 Saves layout preferences such as sidebar state and view density so your workspace feels familiar on each visit. 12 months No
Functional Language preference
loam_locale		 Records your preferred language or region setting. 12 months No
Analytics Usage analytics
(first-party or third-party — provider TBC)		 Tracks aggregated, anonymised data about page views, feature usage, session duration, and navigation flows. Used to understand how the product is used and to make informed decisions about infrastructure and features. No specific provider is used yet; this table will be updated when one is selected. Up to 24 months No
Marketing Ad attribution pixels
(planned — not yet active)		 Will be used to measure the effectiveness of advertising campaigns (e.g., Google Ads, Meta, LinkedIn). Not currently deployed. We will update this policy and present a new consent prompt before activating any marketing cookies. Up to 90 days (when active) No

Strictly necessary cookies cannot be disabled because the service cannot function without them. All other categories require your consent before we set them.

4. Third-Party Cookies

Some cookies on Loam are set by third-party services. We outline the categories below.

Analytics providers

We plan to use a third-party analytics service (provider not yet selected) to help us understand how Loam is used. When we do, that provider may set its own cookies or use pixel-based tracking. We will update this section with the provider name, a link to their privacy policy, and specific cookie names before enabling analytics.

Authentication infrastructure

Our authentication infrastructure may set cookies related to secure token exchange. These are strictly necessary and are covered under the Strictly Necessary category above.

Marketing pixels (coming soon)

Not yet active. We intend to run paid advertising campaigns in the future using platforms such as Google Ads, Meta (Facebook/Instagram), and LinkedIn. Before we activate any marketing pixels, we will update this policy with full details and request fresh consent from all users.

5. Managing Cookies

Cookie preferences banner

When you first visit loam.ink or app.loam.ink, a cookie consent banner is displayed. You can accept all cookies, accept only strictly necessary cookies, or customise your choices by category. You can update your preferences at any time by clicking the “Cookie Preferences” link in the site footer or in the app settings.

Browser controls

You can also control cookies directly through your browser settings. Most browsers allow you to view, block, or delete cookies. Note that blocking strictly necessary cookies will prevent Loam from functioning correctly — you will not be able to sign in or maintain a session.

Opt-out tools

For analytics opt-out, you can also use the Google Analytics Opt-out Browser Add-on (when applicable) or enable “Do Not Track” in your browser. We respect the Sec-GPC (Global Privacy Control) signal where technically feasible.

If you are located in the European Union, European Economic Area, or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our use of cookies.

Legal basis

  • Strictly Necessary cookies — we rely on our legitimate interest in providing a functioning, secure service. These cookies do not require your consent.
  • Functional, Analytics, and Marketing cookies — we rely on your consent (Article 6(1)(a) GDPR) before placing these cookies. Consent is freely given, specific, informed, and unambiguous.

Your rights

Under GDPR you have the right to:

  • Withdraw consent at any time through the cookie preferences banner or your browser settings. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
  • Access information about cookies placed on your device.
  • Erasure — request deletion of personal data collected via cookies.
  • Portability — receive a copy of data collected via cookies in a structured, machine-readable format (where technically feasible).
  • Lodge a complaint with your local supervisory authority if you believe your rights have been infringed.

To exercise any of these rights, contact us at privacy@loam.ink.

Consent first. We will not set any non-essential cookies until you have given your explicit consent via the banner. If you navigate away without making a choice, only strictly necessary cookies are used.

7. CCPA — California Rights

If you are a resident of California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights regarding the personal information we collect through cookies.

Right to know

You have the right to know what categories of personal information we collect through cookies, the purposes for collection, and whether we disclose or “sell” that information. This Cookie Policy, together with our Privacy Policy, provides that disclosure.

Right to opt out of sale or sharing

We do not currently sell personal information. If we introduce any third-party cookies that could constitute a “sale” or “sharing” under the CCPA (e.g., marketing pixels that enable cross-context behavioural advertising), we will provide a prominent “Do Not Sell or Share My Personal Information” link before activating them.

Right to delete

You may request deletion of personal information associated with your account, including data collected via cookies, by contacting us at privacy@loam.ink.

Right to non-discrimination

We will not discriminate against you for exercising any CCPA rights — you will continue to receive the same quality of service.

8. Changes to This Policy

We may update this Cookie Policy from time to time as our use of cookies evolves or as legal requirements change. When we make material changes — such as adding a new cookie category or a new analytics provider — we will:

  • Update the “Last updated” date at the top of this page.
  • Display a new consent banner where the changes require fresh consent (e.g., activating marketing cookies).
  • Notify registered Loam users by email if the changes are significant.

We encourage you to review this policy periodically. Continued use of Loam after changes become effective constitutes acceptance of the updated policy, to the extent permitted by applicable law.

9. Contact

If you have any questions about how we use cookies, want to exercise your privacy rights, or wish to withdraw consent, please reach out to us:

Loam Pty Ltd
Privacy enquiries: privacy@loam.ink
Website: loam.ink

We aim to respond to all privacy-related enquiries within 30 days.

This Cookie Policy applies to the websites loam.ink and app.loam.ink, operated by Loam Pty Ltd, incorporated in Australia. For our broader data practices, see the Privacy Policy.