Privacy policy

This policy is a plain-language draft for the preview of Lustre and will be reviewed before launch. We collect as little as we can.

What we collect

• Anonymous usage events (first-party). To see where visitors get stuck, our own server records simple events: you arrived, you saw an answer, you used a tool (for example a date chip or the melt calculator), you saved a coin to My Stack, you clicked a partner link. Each event has the page path, the type of page, a random ID, and for arrivals the website you came from (domain only). The random ID is made in your browser and stored in this site's local storage and in one first-party cookie (lx_id, one year). It is not linked to your name, email or IP address. We do not record what you typed, what is in your stack, your photos, or exact amounts (only a rough size such as "under $10"). We do not record events from visitors whose browser sends Do Not Track or Global Privacy Control. The events stay on our own Cloudflare database and are read only by the site owner.
• My Stack. The coins you add to My Stack are kept in your browser's local storage on your device. They are not sent to us. Clearing your browser data removes them.
• Waitlist email. If you join a waitlist, we store your email address and which list you joined, so we can write to you when that service opens. We do not share it or sell it.
• Scan photos. In the preview, a photo you scan is sent to our server only to produce a reading and is not stored. When the real scanner launches, this policy will say if photos are kept, where, and for how long; they will never be public.
• Request logs. Our host (Cloudflare) keeps standard logs such as IP address and page requested, for security and reliability. For the anonymous scan limit we store a salted, one-way hash of your IP address that changes daily.

What we do not do

• We do not use advertising cookies, and we do use Google Analytics (Google LLC) for aggregate usage statistics such as pages viewed and which tools are used. Google Analytics sets its own cookies and receives your IP address and page data as described in Google’s policy and privacy policy. It is switched off if your browser sends Do Not Track or Global Privacy Control. The lx_id cookie is ours and is used only for our own counts described above.
• We do not sell personal data and we do not share the usage events with anyone.
• Some links go to coin dealers through our own /go/ address, which records that a link was clicked (which dealer and which page, no personal details) and then sends you on. If we are paid by a dealer for a sale, the dealer's own privacy policy covers what happens on their site. Where such links exist, they are marked as affiliate links.

Your choices

You can stop the usage events at any time by turning on Do Not Track or Global Privacy Control in your browser, or by deleting the lx_id cookie and this site's local storage. To be removed from a waitlist or to ask what we hold about you, contact us at the address published on this page when the domain is live. We will act on the request within 30 days.

Where it is stored

Data is stored with Cloudflare. Cloudflare may process it in the United States and other countries.