Privacy

Last updated 1 October 2026

We count how many people are watching. We do not know, and do not try to find out, who they are.

The short version

• No accounts, no cookies, no ads that follow you, and no tracking pixels.
• We do not store your IP address.
• We only keep your country if you choose to share it, and only as two letters.
• If your browser sends Do Not Track or Global Privacy Control, lofy.tv sends no viewing numbers at all (two small exceptions are listed below).
• If you ask to book a sign, we keep what you tell us in order to run that booking, and nothing else.

What we count while you watch

About once a minute while the tab is visible, your browser tells us which channel is on, for how many seconds, and which sponsor signs were on screen. It also sends a random visit code made in your tab. The code is held in memory only, is never written to your device, and is replaced every time the page loads and every day, so it cannot be used to recognise you from one visit to the next. It exists only so that one viewer is not counted twice.

Each of these reports contains the channel, the day, the seconds, the visit code, whether you share your country, and the sponsor signs on screen. It contains no IP address, cookie, user agent, referrer, city, region or coordinates, and there is nowhere in it to put them. The raw reports are deleted after about three months. We keep daily totals (viewers, minutes watched, busiest minute, signs seen, clicks, gestures) for our own records and for the reports we give sponsors. The total number of visits, today and since lofy.tv began, is also shown to everyone in the "who's watching" list. It is a single number each, with nothing about any visitor.

Do Not Track and Global Privacy Control

If your browser sends Do Not Track or Global Privacy Control when the page loads, lofy.tv sends no viewing numbers at all: no minutes watched, no visit, and no sign impressions. Two things are unchanged. You are still included in the live "watching" count, which is anonymous. And a click on a sponsor's sign still counts as one click. The "Share my country" switch is separate and keeps working as you set it. Your browser reads these signals once when the page loads, so reload after changing them.

The live "watching" count and gestures

To show how many people are in a room, your browser keeps a connection open to our server and says it is still there every 30 seconds. We work out the count and forget the connection when it closes. To stop one device opening a flood of connections, the server keeps a scrambled version of your IP address (a keyed hash that changes every day and cannot be turned back into the address) for as long as your connection is open. The real address is not passed on and is not stored.

When you float a lantern or sail a toy boat, everyone in that room sees it. The server chooses the colour and the time. Nothing about you is attached, except your country's flag if you share your country.

Country

If "Share my country" is on (it is on by default; you can turn it off in the mixer), the server reads your country from Cloudflare, as two capital letters, and uses it for the "who's watching" list and the small flag on your lantern or boat. Switch it off and you are still counted, just shown nowhere. In the live list, countries with only one viewer are grouped under "others". In the daily totals we keep, countries with fewer than five viewers that day are grouped under "others".

Sponsor signs and clicks

Booked signs link to the sponsor through lofy.tv, so a click can be counted. The count is a number only. We do not record who clicked, from where or with what device, and we do not pass your IP address, or anything else about you, to the sponsor. Once you are on the sponsor's site, their own privacy policy applies.

Cloudflare

lofy.tv runs on Cloudflare, which delivers the site and, like any host, handles your connection while it does. We also use Cloudflare's Web Analytics to count visits to the site; it is cookie-less. Cloudflare Turnstile protects the sponsor request form from bots.

What stays on your device

Your browser remembers a few settings so the site feels the same next time: your mixer levels, your starred channels, whether you share your country, whether the auto-tour is on, the last site settings and sponsor signs it received (so the site works offline), which site notice you have closed, and, if you were offline, viewing numbers waiting to be sent. These stay on your device. You can clear them any time in your browser's site settings.

If you ask to book a sign

The request form asks for your name, email, business or project, the sign text and colour, the link, the dates you want and an optional note. We keep these, and the reply we send, to run your booking: to hold your dates, decide, take payment, show your sign, and send you a report of how it did. We also keep a plain record of payments for our accounts. We do not store your IP address, browser details or cookies with a request.

Emails are sent through Cloudflare's email service from hello@lofy.tv, as plain text and simple HTML, without tracking pixels or tracked links. Your sponsor report is a private web address that only people with the link can open; ask us to turn it off whenever you like.

We use your details only for the booking and for replying to you. We do not sell them or share them with other companies, other than the services above that run the site and send the email.

How long we keep things

• Raw viewing reports: about 3 months. The daily totals made from them (viewers, minutes, signs seen, clicks) are kept.
• Requests that never became a booking (declined, expired or withdrawn, and never approved): deleted after 12 months, together with the sponsor's contact details if nothing else of theirs is kept.
• Bookings and payment records: kept as long as tax and accounting rules require.
• Settings on your device: until you clear them.

Your choices

To ask what we hold about a booking or request, have it corrected, or ask us to delete it, write to hello@lofy.tv. We will delete it unless the law requires us to keep it, as it does for payment records. Everything else above is on by default only where it is anonymous, and you can switch off the parts that are not: your country in the mixer, viewing numbers through Do Not Track or Global Privacy Control.

Changes

If we change this page, we will change the date at the top. If we ever add something that collects more than is described here, we will say so here first.

Questions: hello@lofy.tv