Privacy Policy

Who we are

Loki is operated by Pebble House, a Travel AI, Inc. company. Loki is a workshop for experimental websites. This policy covers Loki at loki.nyc. Other websites made with Loki are separate and may have their own privacy policies.

Reading the public pages

You can read the home page and these legal pages without an account. We do not set cookies on these pages and we do not run analytics or tracking scripts.

Information you send us

If you email us, we receive your email address and what you write. We use it to reply to you and to handle any follow-up.

Signing in to the operating tools

Loki’s operating tools are limited to authorized users. Signing in uses an email address and a password. When an authorized user signs in, a session cookie keeps them signed in. Account emails, such as confirmation and password reset messages, are sent through Resend.

Loki’s operator can also sign in with Google. Google shares the account’s email address, name and profile picture with us. We use the email address to check that the account belongs to the Loki operator and to record who published each website. We don’t use it for anything else and we don’t share it.

Hosting and service providers

Loki runs on Vercel, which keeps standard server logs (such as IP address, browser type and the page requested) to run and protect the service. Account data is stored by Supabase, our database and authentication provider. Our email is hosted by Google Workspace. These providers process information in the United States.

How long we keep information

We keep messages you send us for as long as we need them to answer you and handle any follow-up. Authorized-user accounts are kept while access is needed. You can ask us to delete information we hold about you by emailing support@loki.nyc.

Questions and requests

For privacy questions or requests about your information, contact support@loki.nyc.

Changes to this policy

Updates will appear on this page with the date they take effect.