Privacy Policy

How Lume handles the data you send us.

This is template copy pending legal review. It describes Lume’s intended data practices.

What we collect

Lume processes request metadata that you send from your own sites: request method, host, path, user-agent, response status, the utm_source parameter, and a truncated network prefix of the client IP. We do not collect full query strings or the personal content of your visitors’ requests.

IP truncation before persistence

A visitor’s full IP address is used momentarily at ingestion to verify agents and classify the network, then truncated (IPv4 to a /24, IPv6 to a /48) before anything is stored. The full IP is never persisted.

Tokens

Ingest and API tokens are stored hashed only. We never store plaintext credentials.

Where data is hosted

Lume is hosted in the United States (Google Cloud, region us-east4).

Subprocessors

Your rights & contact

For access, correction, or deletion requests, contact privacy@lumetraffic.com.