Cookie Policy
Last updated: July 2026
The short version
Neither this website nor the LumaVista app sets any cookies. This website stores a single preference (your dark/light mode choice) in your browser. The app at app.lumavista.eu stores what it needs to function — your signed-in session, your device's encryption key, and interface preferences — in your browser's local storage. All of it is functional; none of it is tracking. No tracking cookies, no advertising cookies, no third-party analytics.
What this website stores
| Name | Purpose | Type | Duration |
|---|---|---|---|
theme | Remembers your dark/light mode choice | localStorage | Until you clear it |
Technically, localStorage is not a cookie — it's browser storage that never leaves your device and is never sent to our servers. We list it here for full transparency.
What the app stores
When you sign in at app.lumavista.eu, the app keeps the following in your browser. All of it is strictly necessary for the service to work — none of it is used for tracking, and none of it is shared with third parties.
| What | Purpose | Type | Duration |
|---|---|---|---|
| Session credentials | Keeps you signed in between page loads | localStorage | Wiped on logout |
| Encrypted account data | Your account profile, stored encrypted | localStorage | Wiped on logout |
| Device encryption key | The key pair that end-to-end encrypts your data; it identifies this device and never leaves it | IndexedDB | Until you remove the device or delete your account |
| Session workspace state | Drafts, recent searches, pinned items, and similar in-progress interface state | localStorage | Wiped on logout |
| Interface preferences | Theme, sidebar layout, language, and similar device-level preferences | localStorage | Until you clear it |
| Ephemeral view state | Scroll positions, dismissed notices, language handoff from this website | sessionStorage | Until the tab closes |
Signing out wipes everything session-tied; only device-level preferences and the device encryption key remain (removing the key would force you to re-enroll the device). Because your data is end-to-end encrypted, the device key living only in your browser is what keeps us unable to read it.
Server-side traffic statistics
We keep aggregate statistics of which pages get visited, where visitors come from (the referring website's domain, and the country your request originates from), and which paths lead to our contact page. This is computed from our own web server's logs, stored on our own servers in the EU, and never shared with anyone.
These statistics involve no cookies, no browser storage, and no tracking code on your device. We do not store your IP address or any browser fingerprint — we keep only a short-lived rotating hash that lets us count unique daily visits, and that hash becomes mathematically unrecoverable after 24 hours.
What we don't use
- No Google Analytics or similar tracking tools
- No advertising or remarketing cookies
- No social media tracking pixels
- No cross-site tracking of any kind
- No cookie consent banner — because everything we store is strictly necessary for the service you asked for, which EU ePrivacy rules exempt from consent
Third-party services
Our contact form is processed by Formspree. When you submit the form, your data is sent directly to Formspree's servers. Formspree may set its own cookies during form submission — see their privacy policy for details.
Changes
If we ever add analytics or other technologies that use cookies, we'll update this page and add a consent mechanism before any tracking cookies are set.
Questions
If you have questions about our cookie practices, contact us at privacy@lumavista.ai.