Privacy Policy

Last updated: June 1, 2026

This Privacy Policy explains how Lume («we», «us») handles information when you use the Lume Chrome extension, the Lume Telegram bot (@LumepriceBot), or the withlume.org website (together, the «Service»).

1. What we collect

Chrome extension:

• URLs of product pages you visit (only on pages where the extension activates as a product)
• Public product data on the page: title, price, currency, image URL, SKU
• A randomly generated anonymous device ID (stored in your browser)

Telegram bot:

• Your Telegram user ID and first name (provided by Telegram API)
• Product URLs you send to the bot
• Target prices you set

Email and support:

• Your email and message when you write to [email protected] (e.g. data deletion or a support question)

We do not collect: passwords, cookies, browsing history outside product pages, files on your device, payment information, or any data from non-product pages.

2. How we use the data

• To track and display price history
• To send price-drop and back-in-stock notifications
• To compare prices across stores
• To respond to your messages

We do not use your data for advertising, profiling, or selling to third parties.

3. Storage and processing

Product and price data is stored on a cloud server located in the EU. Off-site backups are kept on a private device in Ukraine. We don't share data with external marketing services. Support correspondence may be retained as long as it's needed to handle your request.

4. Data sharing

We do not sell, rent, or share your data with third parties. The only external service in the request path is Cloudflare, which proxies traffic for security and performance (see cloudflare.com/privacypolicy).

5. Retention

Product price history is retained indefinitely to support long-term tracking. You can request deletion of your data anytime by emailing us. Inactive Telegram bot accounts and their tracking lists may be cleaned up after 12 months of inactivity.

6. Your rights

You can:

• Uninstall the extension at any time - no local data persists after removal
• Stop the Telegram bot and delete your tracking list at any time
• Request deletion of all your data by emailing us

7. Security

All communication between the extension, the bot, and our servers uses HTTPS. API endpoints are protected with API-key authentication. The extension requests only the permissions strictly required to operate.

8. Children

The Service is not directed at children under 13. We do not knowingly collect information from children.

9. Changes

We may update this policy from time to time. When we do, the «Last updated» date at the top of this page changes. Continued use of the Service after changes are posted means you accept the updated policy.

10. Contact

Questions about this Privacy Policy? Write to [email protected]. See also: Imprint · Terms of Use.