Privacy Policy

1. Scope

This policy applies when you use LUMI websites, accounts, community, and related services. Third-party sites and services have their own privacy practices.

2. Information we process

• Account data, including nickname, email, password hash, verification status, and avatar.
• Security and access data, including login time, IP address, basic device and browser information, and abuse-prevention events.
• Service records, including submitted share links, access codes, public file metadata, delivery status, and CDK, role, and Snow Crystal activity.
• Content you choose to provide, including community posts, feedback, complaints, and contribution files.

3. Why we use it

We use information only as reasonably necessary to provide accounts, resource discovery and delivery, email verification, support, security, dispute handling, and service improvement. We do not sell personal information.

4. Cookies and sessions

Necessary cookies and similar technologies keep you signed in, protect sessions, and prevent duplicate or abusive requests. Blocking necessary cookies may prevent sign-in or other features from working.

5. Providers and disclosure

We may share the minimum necessary information with contracted infrastructure, temporary delivery, email, and security providers. We otherwise disclose information only when required by law or reasonably necessary to protect users, the platform, or legal rights.

6. Retention and deletion

We retain information for as long as needed for these purposes. Temporary delivery files are removed under platform rules, while security, transaction, complaint, and audit records may be retained for a reasonable period. Where applicable, you may request access, correction, or deletion through the published support channel.

7. Security

We use access controls, encrypted transport, password hashing, credential protection, and audit logging to reduce risk. No online service can guarantee absolute security.

8. Children

The service is not directed to children below the minimum digital-consent age in their location. A guardian may contact support if a child provided information without appropriate consent.

9. Changes and contact

We may update this policy as the service or law changes. Material changes will be communicated reasonably. Contact the support channel published on the website with privacy questions.