Lume is a free, invite-only private beta. This policy plainly describes what data we process and why. Key point: your video and audio stream passes through our relay but is never recorded or stored. This text is proportionate to the beta and will be legally reviewed before commercial launch.
Data controller
Lume is operated by Jérémy Porteron, independent developer (France). For any data request: jerem.porteron@hotmail.fr.
Data, purposes and legal bases
- Account — email, password (Argon2id-hashed, never plaintext). Contract. Kept: account lifetime + 30 days.
- Beta request — email, name, message, Discord, hardware info (GPU/CPU/use), device/browser type (user-agent, platform), language. Consent + legitimate interest. Kept: up to 12 months if not accepted.
- Security & sessions — IP, browser. Legitimate interest. Kept: up to 12 months.
- Paired devices — name, last seen. Contract.
- Diagnostics — sent only when you choose to. Legitimate interest. Kept: 30 days then auto-deleted.
- Support — email and messages. Kept: 24 months.
The game stream
Your video and audio stream travels directly between your devices when WebRTC allows it, or passes in real time through the relay/TURN. Lume does not record or store it. WebRTC media is protected by DTLS-SRTP and WSS paths by TLS.
Cookies
No advertising or tracking cookies. Only a strictly necessary session cookie (HttpOnly refresh token).
Processors
Your data is never sold. Technical processors only: Contabo (host, Germany/EU), Resend (email), Cloudflare / coturn (TURN relay), Sentry (error telemetry), Stripe (payment, upcoming).
Transfers outside the EU
Servers are in the EU (Germany). Some processors and Google STUN (network fallback — receives an IP, no content) may operate outside the EU, covered by EU Standard Contractual Clauses.
Security
TLS, hashed passwords (Argon2id), restricted server access, rate-limiting. Breach notification obligations respected where required.
Adults only
Lume is for people aged 18 and over. We do not knowingly collect minors' data.
Your rights
Under GDPR: access, rectification, erasure, portability, objection, restriction, and withdrawal of consent. To exercise them, email jerem.porteron@hotmail.fr (reply within one month). You may also lodge a complaint with the French CNIL (cnil.fr).
Changes
This policy may change (end of beta, paid plans). The update date is shown above.
— Legal notice —
Publisher: Jérémy Porteron, independent developer, France — jerem.porteron@hotmail.fr. Host: Contabo GmbH, Aschheim, Germany (EU). The "Lume" brand, the "Helio" agent, logos, interface, texts and code are the exclusive property of the publisher unless stated otherwise.