Privacy Policy

LootRate is a revenue optimization consultancy operated by Mario F. Machado. This privacy policy applies to lootrate.com and explains what data we collect, why we collect it, and your rights regarding that data.

Contact for data matters: mario@lootrate.com

Google Analytics 4 (with your consent)

If you accept analytics, Google Analytics 4 collects: anonymized IP address, browser and device type, pages visited, session duration, and referral source. Legal basis: your consent (GDPR Art. 6(1)(a)). Purpose: understanding how visitors find this site to improve its content and usefulness. You can withdraw consent at any time by clicking “Decline” in the cookie banner or clearing your browser’s localStorage.

Vercel Analytics (always active, no consent required)

This site uses Vercel Analytics in privacy mode. It collects only aggregated, anonymous page view counts. No personal data is transmitted, no cookies are set, and no IP addresses are stored. It does not require consent under GDPR.

Calendly (when you book a call)

Clicking a scheduling link takes you to calendly.com, which operates under its own privacy policy. LootRate receives your name and email address submitted through Calendly. Legal basis: legitimate interest in responding to a business inquiry (GDPR Art. 6(1)(f)).

LootRate itself sets no cookies. Google Analytics 4 sets the following cookies after you give consent:

Your consent choice is stored in your browser’s localStorage under the key lootrate_cookie_consent. This is not a cookie and does not leave your browser.

If you are located in the EEA or UK, you have the right to:

To exercise any of these rights, email mario@lootrate.com. We will respond within 30 days.

Google Analytics 4 data is processed by Google LLC in the United States. Google is certified under the EU-US Data Privacy Framework (adequacy decision, July 2023). Vercel Analytics data is processed by Vercel Inc., also covered by the DPF.

Google Analytics data is retained for 14 months per the default GA4 setting. Contact details received via Calendly are retained for as long as the business relationship is active or until you request deletion.

We may update this policy to reflect changes in our data practices or legal requirements. The “Last updated” date at the top of this page will reflect any revisions.