Privacy and data handling
What this website and the Lummet control plane do with data.
This page summarises how this website and the Lummet control plane handle data. It describes what the software does today.
This public website
- It does not run advertising or analytics trackers and does not set cookies for visitors.
- If you choose a light or dark theme, that choice is saved in your own browser (local storage) and is not sent to a server.
- The site is served through Cloudflare, which processes requests, including IP addresses, as part of delivering the site.
If you contact us
If you email us, we receive the address and the message you send, and we use them to reply to you.
Lummet staff accounts
Staff sign in to the control plane with an email address and a password. Passwords are stored only as salted hashes. A session cookie keeps a signed-in staff member signed in. Administrative actions are written to an audit log, and IP addresses in that log and in sign-in rate limiting are stored as one-way hashes.
Connected brands
The control plane does not store a brand's content or its visitors' data. Each brand runs its own database and publishes its own privacy information.
Last updated