Privacy policy

In short

The Luma website has no cookies, no analytics and no ads. The Luma browser does not collect data about you or about how you use it. The only personal data we may receive from this site is your email address, and only if you join the waitlist.

Who is responsible

This website and the Luma browser are run by the Luma team (the “controller”). You can reach us on our Discord server, discord.lumabrowser.dev.

The website

No cookies, no analytics, no tracking pixels and no embedded content from other companies. The fonts are served from this site, not from a font service, so loading a page does not contact anyone else.

If you choose a light or dark theme, the choice is saved in your own browser (local storage). It is never sent to us and you can clear it at any time.

The site and the Luma downloads run on a server we manage ourselves, not on a hosting platform. To deliver a page, the server uses your IP address and the details your browser sends with every request. It does not keep a log of the pages you visit, and we do not use this data to identify you.

Cookies

This site does not set cookies, first-party or third-party, so there is nothing to accept or refuse and no cookie banner. If that ever changes, this page will say so and we will ask you first.

The waitlist

If you leave your email address to be told when Luma is available, we collect that address, your system (Windows, macOS or Linux) and the language of the page. It is stored with a form service, used only to tell you when Luma comes out for your system and deleted afterwards, or earlier if you ask.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it whenever you like by replying to our email or writing to us.

Discord and links to other sites

The links to our Discord server, the Chrome Web Store and other sites take you to services run by other companies. When you use them, their terms and privacy policies apply, not this one. If you apply to be a beta tester on Discord, we only use what you write there to organise the beta.

The Luma browser

Luma has no telemetry, usage statistics or crash reporting. Your history, bookmarks, passwords, open tabs and privacy statistics are stored on your computer. Passwords are encrypted with your system’s secure storage.

Sync is off until you set it up. When it is on, your data is encrypted end to end (AES-256-GCM, with a key derived from your passphrase) before it is written to a folder or a WebDAV server that you choose. Luma has no server that receives it.

To work, the browser connects to a few services, like any browser: the websites you visit; your search engine (DuckDuckGo by default, with suggestions off until you turn them on); the DNS-over-HTTPS provider you choose (Quad9 by default, when secure DNS is on); easylist.to, to update the filter lists; the Chrome Web Store (Google), only when you install or update extensions; and lumabrowser.dev, to check for new versions of Luma. These requests carry no personal data from Luma beyond what is needed to connect.

If Lumo is installed and running, Luma talks to it only on your own computer, not through our servers. Lumo reads or uses a tab only with your permission. What Lumo then does with a page, for example sending it to the AI service you use with Lumo, depends on Lumo and its settings.

Children

This site is not aimed at children. Please do not join the waitlist if you are under 14 (the age of digital consent in Italy) unless a parent agrees.

Your rights

Under the GDPR you can ask to see, correct or delete your data, to limit or object to how it is used, and to get a copy in a portable format. Write to us using the contacts above. You can also complain to your data protection authority; in Italy that is the Garante per la protezione dei dati personali (garanteprivacy.it).

Changes

If this policy changes, the new version will be published here with a new date. Important changes will also be announced on Discord.