Privacy Policy

• We collect what we need to run your account and build your websites. Nothing else.
• We do not track you. The Lumen app runs no advertising and no third-party tracking, so there is no cookie banner beyond the cookie that keeps you signed in. The optional analytics for the sites you publish are privacy-first and cookieless too, and we explain them below.
• We never sell your data, and we never share it for advertising.
• Your account data is stored in Switzerland.
• You can delete your account, and everything in it, yourself at any time.

Your account. Your email address, and a display name if you set one. We use email to sign you in, and we do not store a password, because Lumen does not use them.

What you build. The messages you write in the builder, the websites generated from them, their revision history, and any images you upload.

Imports. If you import a website, the .zip you upload is processed to rebuild your site and then deleted; we keep only the images extracted from it, alongside your other uploaded images.

Billing. If you subscribe, we store your plan, your credit balance and history, and an identifier linking you to your Stripe customer record. Card details are entered directly with Stripe and never reach our servers.

Technical records. Ordinary server and security logs, kept briefly to keep the service running and to stop abuse.

We set only what is necessary. A sign-in cookie keeps you logged in, and a short-lived cookie carries your first prompt from the homepage into the builder after you sign in, and it expires within thirty minutes.

There are no advertising or profiling cookies, and the visitor analytics for the sites you publish set no cookies either, so there is nothing here you need to opt out of.

To provide the service you asked for and to bill you for it (performance of a contract). To keep the service secure and prevent abuse (our legitimate interest). To keep the invoices the law requires us to keep (legal obligation).

We do not rely on consent for any of this, which is why you are not asked to click through a consent wall. You can still withdraw from all of it by deleting your account.

We use a small number of companies to run Lumen. Each one only receives what it needs to do its job, and each is bound to process it only on our instructions.

Some of them process data outside Switzerland and the EU. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

Your account and websites

Kept until you delete your account. Deleting it removes your websites, their published addresses, and your uploaded images immediately.

Contact-form submissions

Kept until you delete them from your Forms inbox, or until the website they belong to is deleted. Deleting a message is immediate and permanent.

Website analytics

Aggregate, cookieless visitor metrics for the sites you publish (no IP addresses and no personal profiles) are retained by our analytics provider for roughly 90 days and then expire automatically.

Billing records

Invoices and payment records are retained for ten years after the business relationship ends, as Swiss accounting law requires (Art. 958f CO). This applies even after account deletion.

Sign-in and security logs

Retained for a short period for security and abuse prevention, then discarded.

You can ask us for a copy of your data, correct it, have it deleted, or object to how we use it. Most of this you can do yourself: your account page shows your data and lets you delete everything permanently.

Email [email protected] for anything you cannot do in the app. We answer within thirty days.

If you think we have handled your data badly, you can complain to the Swiss Federal Data Protection and Information Commissioner, or to the data protection authority where you live if you are in the EU or UK.

For a website you publish, we collect basic traffic figures so you can see how it is doing. It is built to be private by default:

• No cookies, and nothing is stored on your visitor’s device, so their browser is never tagged and they are never shown a consent banner for it.
• No IP addresses are stored. To count unique visitors we use a salted fingerprint that resets every day and cannot be turned back into an IP address, or used to follow anyone from one day, site, or device to the next.
• Only aggregate numbers are kept, such as page views, countries, referrers, and device types. There are no individual profiles, and the data ages out automatically.

For this data you are the controller and we are only the processor acting on your instructions, which our Data Processing Agreement covers. The approach is designed to comply with the GDPR and to follow privacy best practice, with no Google, no advertising, and no third-party analytics involved.

When a visitor sends a message through a contact form on a website you published, that message belongs to you, not to us. You decide what happens to it; we only store and forward it on your behalf. Our Data Processing Agreement sets out that arrangement, and it applies automatically to every Lumen account.

If we change this policy in a way that matters, we will email you before it takes effect. The date at the top always shows the current version.