Privacy Policy
Last updated: May 2026
1. What We Collect
To provide the LuminaVerse new-tab experience, we collect only:
- Email address — used as your account identifier when you sign in via email verification or Google OAuth.
- Google account public profile (name, avatar) — only if you choose Google sign-in.
- Download count — an anonymous counter stored in your browser to manage free-tier limits.
- Subscription status — whether you have a Premium plan and when it expires, to enable unlimited downloads.
2. What We Do NOT Collect
We do not collect, store, or have access to:
- Passwords (we use verification codes sent to your email)
- Payment details (all payments are handled securely by Creem — we never see your card or billing information)
- Browsing history, search queries, or website visits
- Real name, physical address, or phone number
- IP addresses beyond transient request processing (not logged or stored long-term)
3. How We Use Your Data
Your email is used solely to:
- Identify your account across sessions and devices
- Send one-time verification codes for login
- Determine your Premium subscription status
We do not send marketing emails, newsletters, or promotional content.
4. Data Storage & Security
Account data is stored in Cloudflare D1 (a globally distributed SQL database). All data transmission between your browser and our servers is encrypted via HTTPS. Your login session is managed by a JSON Web Token stored in your browser's local storage — no server-side session data is retained.
5. Third-Party Services
We use the following processors:
- Creem — payment processing (see Creem's Privacy Policy)
- Resend — email delivery for verification codes
- Unsplash / Pexels / Pixabay / NASA — background imagery (fetched client-side; no personal data shared)
6. Your Rights
You may request deletion of your account and associated email at any time by contacting us. Since we store minimal data, deletion is straightforward and complete.
7. Contact
For privacy questions: privacy@aliving.stream