At Finiteloop, security is not an afterthought — it is a design principle. We apply security thinking to client engagements and to our own operations. This page describes how we approach security on this website and in the work we do.
This website collects the minimum data necessary to function. The contact form collects only what you choose to provide. We do not run third-party advertising, behavioural tracking, or analytics cookies.
No passwords, payment details, identity documents, or sensitive personal data are collected or stored through this website. Form submissions are delivered securely and not retained on public-facing servers.
This site fetches weather data from Open-Meteo (an open-source weather API) and loads fonts from Google Fonts. No personal data is transmitted to either service.
Security practices in client engagements are agreed upon in the relevant services agreement and are governed by the specific requirements of each engagement. We follow industry-standard secure development practices including:
Finiteloop® does not make representations regarding the security of systems we have not built or do not operate. Security posture of systems built by us is subject to the terms of the relevant services agreement, and does not constitute an ongoing security guarantee beyond the scope of that agreement.
If you believe you have found a security vulnerability on this website, we encourage responsible disclosure. Please contact us through our contact page describing the issue. We will acknowledge your report and investigate it promptly. We ask that you do not publicly disclose the issue until we have had a reasonable opportunity to address it.
To the maximum extent permitted by applicable law, Finiteloop® shall not be liable for any security breach, data loss, or damage arising from causes beyond our reasonable control, including but not limited to third-party infrastructure failures, force majeure events, or actions of malicious third parties. Our liability in any security-related matter is limited to the extent set out in the applicable services agreement.