Posture, not a certification

This is not legal advice. Counsel reviews before any paid Terms. VPS is in Germany; we will not print a fake Delaware entity.

What we process

In the browser: the file you drop is read with FileReader and never sent unless you click Publish.

On Publish: amount, source label, caption, kind, optional format/row count. No file bytes. No prompts. No API keys. No passwords.

Logs: nginx may store IP and user agent. Theme preference stays in localStorage.

Accounts

Optional. We store email and a password hash (not the password). A session cookie (lc_sid, HttpOnly, SameSite=Lax) keeps you signed in. If you publish while signed in, we may attach those optional published aggregates (amount, source, caption, kind) to the account. No Stripe customer, card, or payment data yet — billing is off.

What we refuse

• Logging into Anthropic, Cursor, or anyone else on your behalf.
• Holding funds, prepaid LLM credits, or tokens.
• Calling a hash or a PNG a legal audit, SOC 2, or EU AI Act compliance.
• Children’s accounts. 18+.
• High-risk Annex III purposes (hiring, credit, health, education admissions).
• Stripe or card-network data. Checkout is off.

Demos

The $6,000 / $1,263 / $480 cards are labeled re-creations of published 2026 reporting. They are not access to anyone’s account.

Contact

Use the contact path on virtusblockchainlabs.com until a Loopcard mailbox exists.