Privacy

Controller identity

Controller identity, registered address, jurisdiction, and supervisory authority are pending confirmation before launch.

Privacy and data requests can be sent to hello@loadbear.io .

Summary

No analytics or session recording runs until you choose Accept analytics. Separately, our hosting and CDN process your IP address to deliver and secure the site. Necessary storage is limited to remembering your consent choice.

What we store and why

Necessary storage: the first-party cookie_consent_v1 cookie stores only your consent choice for about 90 days. It is strictly necessary for remembering that choice and is not tracking.

Optional analytics and session replay: after you accept, LoadBear uses PostHog Cloud EU on the basis of consent under GDPR Article 6(1)(a). You can withdraw consent at any time through Cookie settings.

Hosting and security logs

The site is served through AWS CloudFront, which receives and processes the visitor IP address to route traffic and terminate TLS regardless of cookie consent. CloudFront uses global edge locations for transient delivery and security processing.

AWS WAF and CloudFront/access logs record client IP addresses and request metadata for security, abuse prevention, and operations when that launch infrastructure is provisioned. These logs are intended to be retained for 90 days in the S3 log store and in Grafana Cloud.

The WAF and CloudFront log pipeline forwards logs to Grafana Cloud in the EU, operated by Grafana Labs and hosted on AWS, for security monitoring and observability. This processing is separate from PostHog analytics and is not turned off by choosing necessary only.

Analytics provider

LoadBear uses PostHog Cloud EU for optional analytics and session replay. LoadBear is the controller; PostHog is our processor once the required DPA is in place before launch. PostHog sets first-party ph_* cookies or localStorage only after consent. PostHog Cloud EU disables IP capture by default, so IP addresses are not stored in analytics.

After consent, we collect usage events listed in launch inputs , technical context such as browser/device type and referring or landing pages, and session replay recordings of on-page interactions. Input field contents are masked by default; this homepage currently has no data-collecting forms.

• PostHog privacy policy
• PostHog DPA and sub-processors
• PostHog cookies and persistence
• PostHog session replay

Data location, retention, and sharing

Stored analytics data and stored log data are EU-hosted. CloudFront edge delivery is global and transient, as described above. We do not sell personal data, use third-party advertising cookies, or perform cross-site tracking.

• Consent cookie: about 90 days.
• PostHog analytics events on the free tier: about 12 months.
• PostHog session replay recordings on the free tier: about 30 days.
• PostHog ph_* client-side cookie lifetime: up to about 1 year.
• AWS WAF and CloudFront logs: 90 days in S3 and Grafana Cloud.

Sub-processors for this homepage are PostHog for analytics, AWS for hosting/CDN/WAF, and Grafana Labs for log monitoring in Grafana Cloud EU.

Your rights

Depending on your location, you may have rights to access, correct, erase, restrict, object to, or port your personal data, withdraw consent, and lodge a complaint with the relevant supervisory authority. For a Swedish controller, that authority is IMY (Integritetsskyddsmyndigheten); the final authority depends on the controller identity confirmed before launch.

To exercise these rights, email hello@loadbear.io or use the Contact page.

Changing consent

Use Cookie settings in the footer to switch back to necessary only at any time. This stops PostHog capture and clears PostHog state, but it does not affect infrastructure IP processing and security logging.

Changes to this notice

We update this notice when the public homepage's data processing changes. The effective date is the last updated date shown above.